Misago/misago/threads/api/postingendpoint/floodprotection.py

from datetime import timedelta

from django.utils import timezone
from django.utils.translation import gettext as _

from . import PostingEndpoint, PostingInterrupt, PostingMiddleware
from ....conf import settings

MIN_POSTING_PAUSE = 3


class FloodProtectionMiddleware(PostingMiddleware):
    def use_this_middleware(self):
        return (
            not self.user_acl["can_omit_flood_protection"]
            and self.mode != PostingEndpoint.EDIT
        )

    def interrupt_posting(self, serializer):
        now = timezone.now()

        if self.user.last_posted_on:
            previous_post = now - self.user.last_posted_on
            if previous_post.total_seconds() < MIN_POSTING_PAUSE:
                raise PostingInterrupt(
                    _("You can't post message so quickly after previous one.")
                )

        self.user.last_posted_on = timezone.now()
        self.user.update_fields.append("last_posted_on")

        if settings.MISAGO_HOURLY_POST_LIMIT:
            cutoff = now - timedelta(hours=24)
            if self.is_limit_exceeded(cutoff, settings.MISAGO_HOURLY_POST_LIMIT):
                raise PostingInterrupt(_("Your account has excceed hourly post limit."))

        if settings.MISAGO_DIALY_POST_LIMIT:
            cutoff = now - timedelta(hours=1)
            if self.is_limit_exceeded(cutoff, settings.MISAGO_DIALY_POST_LIMIT):
                raise PostingInterrupt(_("Your account has excceed dialy post limit."))

    def is_limit_exceeded(self, cutoff, limit):
        return self.user.post_set.filter(posted_on__gte=cutoff).count() >= limit