Changeset 37

Timestamp:

04/28/08 12:36:26

Author:

nperriault

Message:

Added mail antiflood system

Files:

• trunk/apps/main/config/i18n.yml (modified) (1 diff)
• trunk/apps/main/config/routing.yml (modified) (1 diff)
• trunk/apps/main/lib/myActions.class.php (modified) (3 diffs)
• trunk/data/fixtures/data.yml (modified) (6 diffs)

trunk/apps/main/config/i18n.yml

@@ -6 +6 @@
-  default_culture:     en
-  source:              XLIFF
-n
+ff
-  cache:               off
-  untranslated_prefix: "[T]"

trunk/apps/main/config/routing.yml

@@ -98 +98 @@
-
-# Applications
+applications_test:
+  url: /applications/test
+  param: { module: applications, action: test }
-applications_countries:
-  url:   /applications/countries

trunk/apps/main/lib/myActions.class.php

@@ -235 +235 @@
-  protected function sendSwiftSmtpPlainMail($module, $action, $to, $subject, $options = array())
-  {
+    try
+    {
+      $this->checkMailFlood();
+    }
+    catch (sfException $e)
+    {
+      $this->setFlash('warning', $e->getMessage());
+      $this->forward404(sprintf('User "%s" is flooding by mail', $this->getUser()->getGuardUser()->getUsername()));
+    }
+
-    $conn = new Swift_Connection_SMTP(sfConfig::get('app_mail_hostname'));
-    switch (strtolower(sfConfig::get('app_mail_protocol')))
@@ -298 +308 @@
-    }
-    $mailer->disconnect();
+    
+    // Add mailSent timestamp
+    $this->getUser()->setAttribute('lastMailAt', time());
+    
-    return ($sent > 0);
-  }
@@ -338 +352 @@
-    return $address;
-  }
+  
+  /**
+   * Checks for mail flooding (die, dirty spammers)
+   *
+   * @return boolean
+   * @throws sfException if mail flooding is detected
+   */
+  protected function checkMailFlood()
+  {
+    $user = $this->getUser();
+    
+    if (!$user)
+    {
+      throw new sfException($this->__('Mail sending use the session, please allow cookies'));
+    }
+    
+    $lastMailAt = $user->getAttribute('lastMailAt', null);
+    
+    if (is_null($lastMailAt))
+    {
+      return;
+    }
+    
+    $ttl = sfConfig::get('app_mail_mail_flood_time', 300);
+    
+    if (time() - $lastMailAt < $ttl) 
+    {
+      throw new sfException(sprintf($this->__('You must wait at least %d seconds between two mail send, please try again later'), $ttl));
+    }
+  }
-
-}

trunk/data/fixtures/data.yml

@@ -5 +5 @@
-    summary:            Father of the Symfony framework
-    password:           password
-fabien@symfony-project
+nperriault+test1@gmail
-    trac_username:      fabien
-    homepage:           "http://www.symfony-project.com/"
@@ -19 +19 @@
-    display_name:       Nicolas Perriault
-    password:           password
-
++test2
-    trac_username:      nicolas
-    homepage:           "http://prendreuncafe.com/blog"
@@ -42 +42 @@
-    display_name:       Tristan Rivoallan
-    password:           password
-tristan@rivoallan.net
+nperriault+test3@gmail.com
-    trac_username:      trivoallan
-    country:            FR
@@ -55 +55 @@
-    display_name:       François Zaninotto
-    password:           password
-fzaninotto@ma-generation
+nperriault+test4@gmail
-    trac_username:      francois
-    homepage:           "http://www.mageneration.com/"
@@ -67 +67 @@
-    username:           johndoe
-    password:           password
-john@doe
+nperriault+test5@gmail
-    summary:            "Super newbie"
-    country:            US
@@ -78 +78 @@
-    username:           I_shouldnt_appear
-    password:           password
-foo@bar
+nperriault+test6@gmail
-    country:            UK
-    is_validated:       0