search

Azuriom / Plugin-Support

A support plugin that allows users to create a ticket when they need help.
https://market.azuriom.com/resources/3
MIT License
2 stars 9 forks source link

Ticket comment delay #33

Closed MsEDok closed 4 months ago

MsEDok commented 4 months ago

Issue is that when a user spam click the comment/post button it send comment without getting a limit

video: https://streamable.com/m5r23h

This could be abuse and fill up the database quickly (long message + autoclicker)

MrMicky-FR commented 4 months ago

The page loading should definitely be faster, but seems out of scope. Some basic rate limiting should be in place on the webserver (or proxy if any), as it’s some kind of DoS. Also in case it happens the whole ticket can be deleted at once (just need to be closed first)