mirror of https://gitlab.com/tildes/tildes.git
Browse Source
People are still continuing to try to abuse the donate page to check stolen credit card numbers, and last night there was a massive burst of attempts coming from many IPs, so the current rate-limiting wasn't able to block most of it. Luckily Stripe blocked all of the charges this time, but I can't keep risking another incident where Tildes is the source of a bunch of fraudulent charges. This adds a global rate-limit to the donate page that should never get hit during normal usage. Hopefully this will be enough to keep the abuse away from the page when it stops working for them relatively quickly.merge-requests/126/merge
Deimos
4 years ago
2 changed files with 4 additions and 0 deletions
Loading…
Reference in new issue