From 05667c52a4a1d917627f0691d25d5cda02c63a74 Mon Sep 17 00:00:00 2001 From: fatchan Date: Mon, 9 Dec 2019 16:08:51 +0100 Subject: [PATCH] make board settings ratelimit changes per board, not per ip, duh --- controllers/forms/boardsettings.js | 2 +- db/ratelimits.js | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/controllers/forms/boardsettings.js b/controllers/forms/boardsettings.js index 405ccc8e..d0112b14 100644 --- a/controllers/forms/boardsettings.js +++ b/controllers/forms/boardsettings.js @@ -76,7 +76,7 @@ module.exports = async (req, res, next) => { } if (res.locals.permLevel > 1) { //if not global staff or above - const ratelimit = await Ratelimits.incrmentQuota(res.locals.ip.hash, 'settings', 50); //2 changes a minute + const ratelimit = await Ratelimits.incrmentQuota(req.params.board, 'settings', 50); //2 changes a minute if (ratelimit > 100) { return res.status(429).render('message', { 'title': 'Ratelimited', diff --git a/db/ratelimits.js b/db/ratelimits.js index b3c9d434..d27650b4 100644 --- a/db/ratelimits.js +++ b/db/ratelimits.js @@ -7,8 +7,8 @@ module.exports = { db, - resetQuota: (ip, suffix) => { - return db.deleteOne({ '_id': `${ip}-${suffix}` }); + resetQuota: (id, suffix) => { + return db.deleteOne({ '_id': `${id}-${suffix}` }); }, incrmentQuota: (ip, suffix, amount) => {