diff options
| author | Pitu <[email protected]> | 2017-02-01 19:46:10 -0300 |
|---|---|---|
| committer | Pitu <[email protected]> | 2017-02-01 19:46:10 -0300 |
| commit | 67411d7fa91d561b6f13270cccc53e36ed4bb4bc (patch) | |
| tree | 943df05da78d6fdbf463c0be70459273fa93e59f | |
| parent | Don't declare viewport twice, you dummy @pitu (diff) | |
| download | host.fuwn.me-67411d7fa91d561b6f13270cccc53e36ed4bb4bc.tar.xz host.fuwn.me-67411d7fa91d561b6f13270cccc53e36ed4bb4bc.zip | |
Added rate limiting
| -rw-r--r-- | lolisafe.js | 9 | ||||
| -rw-r--r-- | package.json | 1 |
2 files changed, 8 insertions, 2 deletions
diff --git a/lolisafe.js b/lolisafe.js index f31b70e..3bd6616 100644 --- a/lolisafe.js +++ b/lolisafe.js @@ -2,6 +2,7 @@ const config = require('./config.js') const api = require('./routes/api.js') const express = require('express') const bodyParser = require('body-parser') +const rateLimit = require('express-rate-limit') const db = require('knex')(config.database) const fs = require('fs') const safe = express() @@ -12,15 +13,19 @@ fs.existsSync('./' + config.logsFolder) || fs.mkdirSync('./' + config.logsFolder fs.existsSync('./' + config.uploads.folder) || fs.mkdirSync('./' + config.uploads.folder) fs.existsSync('./' + config.uploads.folder + '/thumbs') || fs.mkdirSync('./' + config.uploads.folder + '/thumbs') +safe.enable('trust proxy') + safe.use(bodyParser.urlencoded({ extended: true })) safe.use(bodyParser.json()) -safe.enable('trust proxy') - safe.use('/', express.static('./uploads')) safe.use('/', express.static('./public')) safe.use('/api', api) +let limiter = new rateLimit({ windowMs: 5, max: 2 }) +safe.use('/api/login', limiter) +safe.use('/api/register', limiter) + safe.get('/', (req, res, next) => res.sendFile('home.html', { root: './pages/' })) safe.get('/faq', (req, res, next) => res.sendFile('faq.html', { root: './pages/' })) safe.get('/auth', (req, res, next) => res.sendFile('auth.html', { root: './pages/' })) diff --git a/package.json b/package.json index d117cfe..c891365 100644 --- a/package.json +++ b/package.json @@ -18,6 +18,7 @@ "bcrypt": "^1.0.2", "body-parser": "^1.16.0", "express": "^4.14.0", + "express-rate-limit": "^2.6.0", "gm": "^1.23.0", "knex": "^0.12.6", "multer": "^1.2.1", |