MushroomObserver / mushroom-observer

A website for sharing observations of mushrooms.
https://mushroomobserver.org
MIT License
77 stars 25 forks source link

Require login for costly queries #2090

Open JoeCohen opened 3 months ago

JoeCohen commented 3 months ago

A short 2024-04-07 outage was caused by rapid-fire coordinated scraping that included expensive requests like /?by=name&letter=W&q=1pocS. By email, @mo-nathan suggests:

Apr 8, 2024, 6:03 AM (1 day ago) I do think it’s reasonable to require a login for costly database queries as well as outright preventing rapid fire scraping. We just need to have reasonable behavior for non-logged in humans. We should talk it over sometime soon.