Project(Task) : Implement Rate Limiting for Issue Creation

blt/settings.py

@@ -199,6 +199,8 @@
 #        'LOCATION': 'cache_table',
 #    }
 # }
+
+
 REST_AUTH = {
     'SESSION_LOGIN': False
 }

website/migrations/0082_issue_reporter_ip_address.py

@@ -0,0 +1,17 @@
+# Generated by Django 4.2.8 on 2024-02-17 19:32
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("website", "0081_userprofile_issue_downvoted"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="issue",
+            name="reporter_ip_address",
+            field=models.GenericIPAddressField(blank=True, null=True),
+        ),
+    ]

website/models.py

@@ -252,6 +252,7 @@ class Issue(models.Model):
     modified = models.DateTimeField(auto_now=True)
     is_hidden = models.BooleanField(default=False)
     rewarded = models.PositiveIntegerField(default=0) # money rewarded by the company
+    reporter_ip_address = models.GenericIPAddressField(null=True, blank=True)
 
 
     def __unicode__(self):

website/views.py

@@ -89,6 +89,7 @@
 from django.core.validators import URLValidator
 from django.core.exceptions import ValidationError
 from django.http import HttpRequest
+from django.utils.timezone import now
 
 def is_valid_https_url(url):
     validate = URLValidator(schemes=['https'])  # Only allow HTTPS URLs
@@ -626,6 +627,14 @@ def process_issue(self, user, obj, created, domain, tokenauth=False, score=3):
             )
 
         return HttpResponseRedirect("/")
+def get_client_ip(request):
+    """Extract the client's IP address from the request."""
+    x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
+    if x_forwarded_for:
+        ip = x_forwarded_for.split(',')[0]
+    else:
+        ip = request.META.get('REMOTE_ADDR')
+    return ip
 
 class IssueCreate(IssueBaseCreate, CreateView):
     model = Issue
@@ -736,6 +745,18 @@ def post(self, request, *args, **kwargs):
         return super().post(request, *args, **kwargs)
 
     def form_valid(self, form):
+        reporter_ip = get_client_ip(self.request)
+        form.instance.reporter_ip_address = reporter_ip
+
+        #implement rate limit
+        limit = 50 if self.request.user.is_authenticated else 30
+        today = now().date()
+        recent_issues_count = Issue.objects.filter(reporter_ip_address=reporter_ip, created__date=today).count()
+
+        if recent_issues_count >= limit:
+            messages.error(self.request, "You have reached your issue creation limit for today.")
+            return HttpResponseRedirect("/report/")
+        form.instance.reporter_ip_address = reporter_ip
 
         @atomic
         def create_issue(self,form):