From: zapata Date: Sun, 19 Mar 2006 20:53:11 +0000 (+0000) Subject: added a posting size anti-abuse filter X-Git-Tag: LATEST_MERGED_1_1~63 X-Git-Url: http://erislabs.net/gitweb/?p=mir.git;a=commitdiff_plain;h=b91681c07507cd92174b2414466525b6ec324be2 added a posting size anti-abuse filter --- diff --git a/bundles/admin_en.properties b/bundles/admin_en.properties index d2f2f874..28925e11 100755 --- a/bundles/admin_en.properties +++ b/bundles/admin_en.properties @@ -1,6 +1,6 @@ ########## admin ########## # language: english -# $Id: admin_en.properties,v 1.48.2.27 2005/12/25 21:38:45 zapata Exp $ +# $Id: admin_en.properties,v 1.48.2.28 2006/03/19 20:53:11 zapata Exp $ languagename=English @@ -510,6 +510,7 @@ filtertype.regexp = Regular expression filtertype.useragent= User Agent filtertype.throttle = Throttle filtertype.hostname = Host name +filtertype.size= Posting size filtererror.title = Error: filtererror.invalidtype = Invalid filter type diff --git a/source/mircoders/abuse/PostingSizeFilterType.java b/source/mircoders/abuse/PostingSizeFilterType.java new file mode 100644 index 00000000..8cccde4c --- /dev/null +++ b/source/mircoders/abuse/PostingSizeFilterType.java @@ -0,0 +1,76 @@ +/* + * Copyright (C) 2001, 2002 The Mir-coders group + * + * This file is part of Mir. + * + * Mir is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * Mir is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with Mir; if not, write to the Free Software + * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA + * + * In addition, as a special exception, The Mir-coders gives permission to link + * the code of this program with any library licensed under the Apache Software License, + * The Sun (tm) Java Advanced Imaging library (JAI), The Sun JIMI library + * (or with modified versions of the above that use the same license as the above), + * and distribute linked combinations including the two. You must obey the + * GNU General Public License in all respects for all of the code used other than + * the above mentioned libraries. If you modify this file, you may extend this + * exception to your version of the file, but you are not obligated to do so. + * If you do not wish to do so, delete this exception statement from your version. + */ + +package mircoders.abuse; + +import mir.entity.Entity; +import mir.session.Request; + +import java.util.Iterator; + +/** + * A description of a regular expression filter. + */ +public class PostingSizeFilterType extends AbstractFilterType { + public PostingSizeFilterType(String aName) { + super(aName); + } + + public FilterInstance constructFilterInstance(final String anExpression) throws AbuseExc { + final long maxSize; + try { + maxSize = Long.parseLong(anExpression); + } + catch (NumberFormatException e) { + throw new AbuseExc("Not an integer: " + anExpression); + } + + return new FilterInstance() { + + public boolean test(Entity anEntity, Request aRequest) { + long totalSize = 0L; + Iterator j = anEntity.getFieldNames().iterator(); + + while (j.hasNext()) { + String field = anEntity.getFieldValue( (String) j.next()); + if (field!=null) { + totalSize += (long) field.length(); + } + } + + return totalSize > maxSize; + } + + public String status() { + return null; + } + }; + } +} \ No newline at end of file diff --git a/source/mircoders/localizer/basic/MirBasicOpenPostingLocalizer.java b/source/mircoders/localizer/basic/MirBasicOpenPostingLocalizer.java index 01333162..bad1ede2 100755 --- a/source/mircoders/localizer/basic/MirBasicOpenPostingLocalizer.java +++ b/source/mircoders/localizer/basic/MirBasicOpenPostingLocalizer.java @@ -29,14 +29,6 @@ */ package mircoders.localizer.basic; -import java.util.ArrayList; -import java.util.HashMap; -import java.util.Iterator; -import java.util.List; -import java.util.Map; -import java.util.Random; -import java.util.Collections; - import mir.config.MirPropertiesConfiguration; import mir.log.LoggerWrapper; import mir.session.Request; @@ -46,6 +38,7 @@ import mircoders.abuse.FilterType; import mircoders.abuse.IPFilterType; import mircoders.abuse.RegularExpressionFilterType; import mircoders.abuse.ThrottleFilter; +import mircoders.abuse.PostingSizeFilterType; import mircoders.entity.EntityComment; import mircoders.entity.EntityContent; import mircoders.global.MirGlobal; @@ -54,6 +47,14 @@ import mircoders.localizer.MirLocalizerExc; import mircoders.localizer.MirLocalizerFailure; import mircoders.localizer.MirOpenPostingLocalizer; +import java.util.ArrayList; +import java.util.Collections; +import java.util.HashMap; +import java.util.Iterator; +import java.util.List; +import java.util.Map; +import java.util.Random; + public class MirBasicOpenPostingLocalizer implements MirOpenPostingLocalizer { private List afterContentProducerTasks; private List afterCommentProducerTasks; @@ -95,6 +96,7 @@ public class MirBasicOpenPostingLocalizer implements MirOpenPostingLocalizer { addSimpleAntiAbuseFilterType(new RegularExpressionFilterType("hostname", false, false, RegularExpressionFilterType.REQUEST_HEADERS, new String[] {"hostname"})); addSimpleAntiAbuseFilterType(new ThrottleFilter("throttle")); + addSimpleAntiAbuseFilterType(new PostingSizeFilterType("size")); } public SessionHandler getOpenSessionHandler(String aSessionType) throws MirLocalizerExc, MirLocalizerFailure {