Page MenuHomePhabricator

D18708.id.diff
No OneTemporary

D18708.id.diff

diff --git a/support/startup/PhabricatorClientRateLimit.php b/support/startup/PhabricatorClientRateLimit.php
--- a/support/startup/PhabricatorClientRateLimit.php
+++ b/support/startup/PhabricatorClientRateLimit.php
@@ -35,7 +35,15 @@
// If the user was logged in, let them make more requests.
if (isset($request_state['viewer'])) {
$viewer = $request_state['viewer'];
- if ($viewer->isLoggedIn()) {
+ if ($viewer->isOmnipotent()) {
+ // If the viewer was omnipotent, this was an intracluster request or
+ // some other kind of special request, so don't give it any points
+ // toward rate limiting.
+ $score = 0;
+ } else if ($viewer->isLoggedIn()) {
+ // If the viewer was logged in, give them fewer points than if they
+ // were logged out, since this traffic is much more likely to be
+ // legitimate.
$score = 0.25;
}
}

File Metadata

Mime Type
text/plain
Expires
Fri, Mar 28, 4:43 AM (3 w, 16 h ago)
Storage Engine
blob
Storage Format
Encrypted (AES-256-CBC)
Storage Handle
7387280
Default Alt Text
D18708.id.diff (927 B)

Event Timeline