Flood protection? - Githubissues

megawac / qwebirc-enhancements

Rich and intuitive browser IRC client.

http://justplay.tf/irc

Other

23 stars 10 forks source link

Flood protection? #29

Open RobertEcker opened 10 years ago

RobertEcker commented 10 years ago

is there any flood protection on the client-side?

megawac commented 10 years ago

The connection on master branch has some simple flood protection I'm still deciding how I want to reimplement it on the connection rewrite (certainly not how it currently works). Have you experienced any trouble with flooding?

RobertEcker commented 10 years ago

flood protection should be implemented on the irc daemon and client

IMHO a good way are the following methods:

you shouldnt be able to send messages within (e.g., 1000 ms)
you shouldnt be able to send the same message twice within (e.g., 5 s)

megawac commented 10 years ago

There's flood protection from CTCP attacks but none for clone or manual floods. Still deciding if and how to implement some more sophisticated protection (do you know of any scripts?).

I'm not really sure how I feel about preventing the client from committing a flood (at least on the client side). Be difficult to detect accurately and bad for the UI - I'd rather let the server handle this unless you have an idea on how to handle it?