Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-07-05 07:47:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: use req.ip instead, since guests can upload as well

Browse Source
This commit is contained in:
psychobunny
2021-04-18 19:19:52 -04:00
committed by Andrew Rodrigues
parent a9978fcfd2
commit ea22cd302a
2 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/middleware/uploads.js
View File

@@ -4,7 +4,6 @@ const LRU = require('lru-cache');
const meta = require('../meta');
const helpers = require('./helpers');
const user = require('../user');
const controllerHelpers = require('../controllers/helpers');
const cache = new LRU({
maxAge: meta.config.uploadRateLimitThreshold * 1000,
@@ -13,20 +12,16 @@ const cache = new LRU({
module.exports = function (middleware) {
middleware.ratelimitUploads = helpers.try(async (req, res, next) => {
const { uid } = req;
if (!uid) {
return controllerHelpers.notAllowed(req, res);
}
if (!meta.config.uploadRateLimitThreshold || await user.isAdminOrGlobalMod(req.uid)) {
if (!meta.config.uploadRateLimitThreshold || uid && await user.isAdminOrGlobalMod(uid)) {
return next();
}
const count = (cache.peek(`${uid}:uploaded_file_count`) || 0) + req.files.files.length;
const count = (cache.peek(`${req.ip}:uploaded_file_count`) || 0) + req.files.files.length;
if (count > meta.config.uploadRateLimitThreshold) {
return next(new Error(['[[error:upload-ratelimit-reached]]']));
}
cache.set(`${uid}:uploaded_file_count`, count);
cache.set(`${req.ip}:uploaded_file_count`, count);
next();
});
};