w33b/hstream
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add rate limiter to comment system

Browse Source
This commit is contained in:
w33b
2026-01-10 21:04:26 +01:00
parent 819e2fde27
commit e949ba955a
2 changed files with 32 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
app/Livewire/Comment.php
View File

@@ -8,6 +8,7 @@ use App\Models\User;
use Livewire\Component;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Cache;
use Illuminate\Support\Facades\RateLimiter;
use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
use Maize\Markable\Models\Like;
@@ -77,12 +78,24 @@ class Comment extends Component
return;
}
$user = auth()->user();
$rateLimitKey = "send-comment:{$user->id}";
if (RateLimiter::tooManyAttempts($rateLimitKey, 5)) {
$seconds = RateLimiter::availableIn($rateLimitKey);
$this->addError('replyState.body', "Too many comments. Try again in {$seconds} seconds.");
return;
}
RateLimiter::hit($rateLimitKey, 60);
$this->validate([
'replyState.body' => 'required'
]);
$reply = $this->comment->children()->make($this->replyState);
$reply->user()->associate(auth()->user());
$reply->user()->associate($user);
$reply->commentable()->associate($this->comment->commentable);
$reply->save();