Protect from POST spamming, botting, and so on...
#7
Open
opened 2 years ago by dawidkubis
·
0 comments
Loading…
Reference in New Issue
There is no content yet.
Delete Branch '%!s(<nil>)'
Deleting a branch is permanent. It CANNOT be undone. Continue?
As of
06d2d7a957
, one can DDOS the entire thing by just spamming POST's with correctly formatted data. Incorrect POST's shouldn't be an issue simply because of kchan's speed. I'm not sure if this kind of spamming can be handled by an nginx gate or similar.I was thinking of adding a
TardWrangler
struct, which would lazily process POST data, and handle ip timeouts.As far as I'm aware, the only way to prevent botting is with a CAPTCHA.
I don't like CAPTCHAs, mostly because I don't see any way to handle a CAPTCHA verified POST in raw html.
I'll leave it as an open issue for now.