4 ms·
Not quite. Your rate limiting seems to be cookie based, which makes it easy for someone to circumvent just by replaying their initial request (or by deleting th
by nbpoole 15y ago
Not quite. Your rate limiting seems to be cookie based, which makes it easy for someone to circumvent just by replaying their initial request (or by deleting the cookie you set).
- sirn 15y agoOr just hit the vote URL repeatedly with cURL (which is done via GET request). The author might want to change it to POST/PUT and limit votes based on IP address instead.
- rlmw 15y agoIt's ok - someone has submitted a sigh to point this out: http://devsigh.com/sigh/58 http://devsigh.com/sigh/58
- chargrilled 15y agoOoops. There's about a half dozen people down_vote DOSing the server right now.
- tudorachim 15y agosudo iptables -I INPUT -s <offending ip> -j DROP