PrivateCoffee/travelynx
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

attempt to prevent registration spam

Browse source
This commit is contained in:
Daniel Friesel 2021-04-20 21:59:17 +02:00
parent aabf3104b1
commit aad2a53459
2 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
lib/Travelynx/Controller/Account.pm
View file

@ -1,4 +1,5 @@
package Travelynx::Controller::Account; package Travelynx::Controller::Account;
# Copyright (C) 2020 Daniel Friesel # Copyright (C) 2020 Daniel Friesel
# #
# SPDX-License-Identifier: AGPL-3.0-or-later # SPDX-License-Identifier: AGPL-3.0-or-later
@ -62,6 +63,7 @@ sub registration_form {
sub register { sub register {
my ($self) = @_; my ($self) = @_;
my $dt = $self->req->param('dt');
my $user = $self->req->param('user'); my $user = $self->req->param('user');
my $email = $self->req->param('email'); my $email = $self->req->param('email');
my $password = $self->req->param('password'); my $password = $self->req->param('password');
@ -118,6 +120,18 @@ sub register {
return; return;
} }
if ( not $dt
or DateTime->now( time_zone => 'Europe/Berlin' )->epoch - $dt < 6 )
{
# a human user should take at least five seconds to fill out the form.
# Throw a CSRF error at presumed spammers.
$self->render(
'register',
invalid => 'csrf',
);
return;
}
my $token = make_token(); my $token = make_token();
my $pw_hash = hash_password($password); my $pw_hash = hash_password($password);
my $db = $self->pg->db; my $db = $self->pg->db;

1
templates/register.html.ep
View file

@ -3,6 +3,7 @@
% } % }
%= form_for '/register' => (method => 'POST') => begin %= form_for '/register' => (method => 'POST') => begin
%= csrf_field %= csrf_field
%= hidden_field dt => DateTime->now(time_zone => 'Europe/Berlin')->epoch
<div class="row"> <div class="row">
<div class="input-field col l6 m12 s12"> <div class="input-field col l6 m12 s12">
<i class="material-icons prefix">account_circle</i> <i class="material-icons prefix">account_circle</i>