annotate gpp/antispam/decorators.py @ 473:5e826e232932
Fixing #224; make sure we block IP's that have tripped the rate limiter or have been manually blocked.
author |
Brian Neal <bgneal@gmail.com> |
date |
Sat, 27 Aug 2011 04:23:30 +0000 |
parents |
7c3816d76c6c |
children |
32cec6cd8808 |
rev |
line source |
bgneal@472
|
1 """
|
bgneal@472
|
2 This module contains decorators for the antispam application.
|
bgneal@472
|
3
|
bgneal@472
|
4 """
|
bgneal@472
|
5 from datetime import timedelta
|
bgneal@472
|
6 from functools import wraps
|
bgneal@472
|
7
|
bgneal@472
|
8 from django.shortcuts import render
|
bgneal@472
|
9
|
bgneal@473
|
10 from antispam.rate_limit import RateLimiter, RateLimiterUnavailable
|
bgneal@472
|
11
|
bgneal@472
|
12
|
bgneal@472
|
13 def rate_limit(count=10, interval=timedelta(minutes=1),
|
bgneal@472
|
14 lockout=timedelta(hours=8)):
|
bgneal@472
|
15
|
bgneal@472
|
16 def decorator(fn):
|
bgneal@472
|
17
|
bgneal@472
|
18 @wraps(fn)
|
bgneal@472
|
19 def wrapped(request, *args, **kwargs):
|
bgneal@472
|
20
|
bgneal@473
|
21 ip = request.META.get('REMOTE_ADDR')
|
bgneal@473
|
22 try:
|
bgneal@473
|
23 rate_limiter = RateLimiter(ip, count, interval, lockout)
|
bgneal@473
|
24 except RateLimiterUnavailable:
|
bgneal@473
|
25 # just call the function and return the result
|
bgneal@473
|
26 return fn(request, *args, **kwargs)
|
bgneal@473
|
27
|
bgneal@473
|
28 if rate_limiter.is_blocked():
|
bgneal@473
|
29 return render(request, 'antispam/blocked.html', status=403)
|
bgneal@473
|
30
|
bgneal@472
|
31 response = fn(request, *args, **kwargs)
|
bgneal@472
|
32
|
bgneal@472
|
33 if request.method == 'POST':
|
bgneal@472
|
34 success = (response and response.has_header('location') and
|
bgneal@472
|
35 response.status_code == 302)
|
bgneal@473
|
36 if not success and rate_limiter.incr():
|
bgneal@473
|
37 return render(request, 'antispam/blocked.html', status=403)
|
bgneal@472
|
38
|
bgneal@472
|
39 return response
|
bgneal@472
|
40
|
bgneal@472
|
41 return wrapped
|
bgneal@472
|
42 return decorator
|