This commit is contained in:
Aevann1 2022-01-15 08:31:17 +02:00
parent 9c6ff97e4d
commit 933831c422
13 changed files with 101 additions and 109 deletions

View file

@ -133,7 +133,7 @@ def downvoting(v, username):
return render_template("voters.html", v=v, users=users, name='Down', name2=f'Who @{username} hates')
@app.post("/pay_rent")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def pay_rent(v):
if v.coins < 500: return {"error":"You must have more than 500 coins."}
@ -149,7 +149,7 @@ def pay_rent(v):
@app.post("/steal")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def steal(v):
if int(time.time()) - v.created_utc < 604800:
@ -203,7 +203,7 @@ def thiefs(v):
@app.post("/@<username>/suicide")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def suicide(v, username):
t = int(time.time())
@ -225,7 +225,7 @@ def get_coins(v, username):
else: return {"error": "invalid_user"}, 404
@app.post("/@<username>/transfer_coins")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@is_not_permabanned
def transfer_coins(v, username):
receiver = g.db.query(User).filter_by(username=username).one_or_none()
@ -262,7 +262,7 @@ def transfer_coins(v, username):
@app.post("/@<username>/transfer_bux")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@is_not_permabanned
def transfer_bux(v, username):
receiver = g.db.query(User).filter_by(username=username).one_or_none()
@ -367,7 +367,7 @@ def song(song):
return resp
@app.post("/subscribe/<post_id>")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def subscribe(v, post_id):
new_sub = Subscription(user_id=v.id, submission_id=post_id)
@ -376,7 +376,7 @@ def subscribe(v, post_id):
return {"message": "Post subscribed!"}
@app.post("/unsubscribe/<post_id>")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def unsubscribe(v, post_id):
sub=g.db.query(Subscription).filter_by(user_id=v.id, submission_id=post_id).one_or_none()
@ -391,8 +391,7 @@ def reportbugs(v):
return redirect(f'/post/{BUG_THREAD}')
@app.post("/@<username>/message")
@limiter.limit("1/second")
@limiter.limit("10/hour")
@limiter.limit("1/second;2/minute;10/hour;50/day")
@is_not_permabanned
def message2(v, username):
@ -458,9 +457,7 @@ def message2(v, username):
@app.post("/reply")
@limiter.limit("1/second")
@limiter.limit("6/minute")
@limiter.limit("50/hour")
@limiter.limit("1/second;6/minute;50/hour;200/day")
@auth_required
def messagereply(v):
@ -795,7 +792,7 @@ def u_username_info(username, v=None):
@app.post("/follow/<username>")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def follow_user(username, v):
@ -819,7 +816,7 @@ def follow_user(username, v):
return {"message": "User followed!"}
@app.post("/unfollow/<username>")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def unfollow_user(username, v):
@ -843,7 +840,7 @@ def unfollow_user(username, v):
return {"message": "User unfollowed!"}
@app.post("/remove_follow/<username>")
@limiter.limit("1/second")
@limiter.limit("1/second;30/minute;200/hour;1000/day")
@auth_required
def remove_follow(username, v):
target = get_user(username)