Limited the number of articles, and the size of article bodies. This, together with the reCAPTCHA setup from <7/Email verification and reCAPTCHA signup protection> should prevent the most basic types of <denial-of-service> attacks by filling up our database.

The limits can be increased by admin users from the web UI, and will be done generously when it is evident that it is not a <DoS attack>. Admin users are also a recently added feature.


Article size and count limits

Ciro's Edict #8 <span class="meta">/</span> Article size and count limits

Added this basic but fundamental protection layer to the website.

The email setup will of course be reused when notifications are eventually implemented.

Currently using <SendGrid> as the email provider. Very easy to setup, and has a free plan.

Adding <reCAPTCHA> immediately after email is a must otherwise an attacker could send infinitely many emails to random addresses, which would lead to the domain being marked as spam. I was pleasantly surprised about how easy the integration ended up being.


Ciro Santilli @cirosantilli 40

 Incoming links: Ciro's Edict #7 / Email verification and reCAPTCHA signup protection