3 ms·

issue: code 403 (Forbidden). I think you should do your best to always return an appropriate HTTP status header, and in this case it is status 503 (Service Tem

issue: code 403 (Forbidden). I think you should do your best to always return an appropriate HTTP status header, and in this case it is status 503 (Service Temporarily Unavailable). You really want to reserve 403's for those pesky w00t w00ts :) , ' aNd 1=1 and the likes. Getting 403's with my personal account, but gaining (slow) access through another browser, I was convinced that the issue had to do with my account being blocked.

kogir 13y ago
In this case using nginx allow and deny statements was much easier than doing bit fiddling in Lua and returning 503s. Any time spent researching other options would have been time not spent determining the problem. Often getting to the root of the problem as quickly as possible while simultaneously keeping the site up (practical) wins over always using correct HTTP response codes (pedantic).
lucb1e 13y ago
Serving 403s to w00tw00ts is for casuals. Face those leet haxors!