home · contact · privacy
Re-instate (better) flood protection.
authorChristian Heller <c.heller@plomlompom.de>
Sat, 5 Dec 2020 05:44:38 +0000 (06:44 +0100)
committerChristian Heller <c.heller@plomlompom.de>
Sat, 5 Dec 2020 05:44:38 +0000 (06:44 +0100)
plomrogue/commands.py
plomrogue/io.py

index dc2e6ead099deb9c2a873f93e3309bd327d7d464..f2e479e17cc0bfbecac54c8f485f9e1d8ddfcb3f 100644 (file)
@@ -36,6 +36,7 @@ def cmd_SPAWN_POINT(game, big_yx, little_yx):
 cmd_SPAWN_POINT.argtypes = 'yx_tuple yx_tuple:nonneg'
 
 def cmd_LOGIN(game, nick, connection_id):
+    # TODO filter newlines
     for t in [t for t in game.things if t.type_ == 'Player' and t.name == nick]:
         raise GameError('name already in use')
     if game.get_player(connection_id):
index 8cba18d7a483664047b3601890fec3df2c4490a9..438b8b6e1301e4da584127382629791ce87756b6 100644 (file)
@@ -16,8 +16,8 @@ class GameIO():
     def loop(self, q):
         """Handle commands coming through queue q, run game, send results back.
 
-        As basic flood protection, Only accepts one command per connection per
-        1/100 of a second (currently commented out).
+        As basic flood protection, only accepts ten commands per connection per
+        1/10 of a second.
 
         """
         import time
@@ -25,13 +25,14 @@ class GameIO():
         while True:
             try:
                 connection_id, command = q.get(timeout=0.001)
-
-                # FIXME: this would catch the init command flood
-                #if connection_id in potential_flooders:
-                #    if int(time.time() * 100) == potential_flooders[connection_id]:
-                #        continue
-                #potential_flooders[connection_id] = int(time.time() * 100)
-
+                now = int(time.time() * 10)
+                if connection_id in potential_flooders and \
+                   potential_flooders[connection_id][0] == now:
+                    if potential_flooders[connection_id][1] > 10:
+                        continue
+                    potential_flooders[connection_id][1] += 1
+                else:
+                    potential_flooders[connection_id] = [now, 1]
                 self.handle_input(command, connection_id)
             except queue.Empty:
                 self.game.run_tick()