11 Commits

Author SHA1 Message Date
fd5fa56138 Fix several security concerns (#1471)
* Use REMOTE_ADDR field

The other ones are not used at all. This would allow someone to spoof
the configured IP address and bypass any rate limit.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

* Add basic ratelimiting class

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

* Remove Mautic submission form

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

* Replace captcha with ratelimiter

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

* Space + tabs

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>

* Dont check if no REDIS is defined in config

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-05-28 10:13:28 +02:00
cc22c6d916 Statistics retrieval
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-08-29 12:56:23 +02:00
bcb794ab47 Translation compatibility and newsletter
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-06-25 12:10:36 +02:00
b77799563f Bump config, fixed ocs api and noscript detection-removal
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2018-06-22 10:28:57 +02:00
ffc28ee636 get rid of PHP warnings...
Signed-off-by: Jos Poortvliet <jospoortvliet@gmail.com>
2018-02-27 20:31:11 +01:00
45f6c52efd Small fix
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2018-02-27 20:31:11 +01:00
5bb7ceed93 Improve the mautic code
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2018-02-27 20:31:11 +01:00
8e9c27ae50 fix the readme and read the config.php.sample
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2017-02-14 11:38:57 -06:00
f28be8ffa8 update 2016-11-01 22:25:14 +00:00
e27d6d9ff2 Add recaptcha 2016-06-17 18:02:18 +02:00
666499e6af first version 2016-06-03 21:52:31 +02:00