From c352f8eb152940d8523dd9c97fd88b3f54557fd0 Mon Sep 17 00:00:00 2001 From: Arpit Jalan Date: Thu, 28 Jun 2018 16:38:58 +0530 Subject: [PATCH] FEATURE: rate limit post deletions to 50 per day --- app/controllers/posts_controller.rb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/controllers/posts_controller.rb b/app/controllers/posts_controller.rb index be2eb391450..5b962e7fa67 100644 --- a/app/controllers/posts_controller.rb +++ b/app/controllers/posts_controller.rb @@ -266,7 +266,10 @@ class PostsController < ApplicationController def destroy post = find_post_from_params - RateLimiter.new(current_user, "delete_post", 3, 1.minute).performed! unless current_user.staff? + unless current_user.staff? + RateLimiter.new(current_user, "delete_post", 3, 1.minute).performed! + RateLimiter.new(current_user, "delete_post", 50, 1.day).performed! + end guardian.ensure_can_delete!(post)