 hikmet tanriverdi
|
17319a1555
|
Merge pull request #1 from hikmet4434/guvenlik/hiz-siniri
Hız sınırı: korumasız uçlara IP başına limit
|
2026-08-02 14:38:51 +03:00 |
|
 hikmet4434andClaude Opus 5
|
2441519ab6
|
Hiz siniri: giris, kayit ve arama uclari
Uygulamada hicbir hiz siniri yoktu. /api/auth/login sinirsiz sifre denemesine,
/api/auth/register sinirsiz sahte hesap acmaya aciкti (her hesap FREE plan
kotasi alir = dogrudan maliyet).
- src/lib/rate-limit.ts: IP basina sabit pencere sayaci, surec belleginde
(ek altyapi yok). Cok instance'a cikilirsa Redis/Postgres'e tasinmali.
- giris 10/15dk — sayac IP+eposta bazli: tek IP'den farkli hesaplara
saldiri da yavaslar
- kayit 5/saat
- ads/search 60/dk — kota kontrolu zaten var, bu limit agir sorgu seliyle
veritabanini bogmayi engeller
- 429 + Retry-After + Turkce mesaj
- IP: x-forwarded-for'un SON elemani (ilk eleman istemci tarafindan
uydurulabilir; son elemani bizim proxy ekler)
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
2026-08-02 13:50:10 +03:00 |
|
|
hikmet4434
|
4e8dcf207d
|
Fix dashboard search filters
|
2026-07-08 11:52:05 +03:00 |
|
|
hikmet4434
|
9edf6ac794
|
fix: support async searchParams for Next.js 16 and bypass locking for admin users
|
2026-07-08 11:38:15 +03:00 |
|
|
hikmet4434
|
fe6bb264b0
|
feat: allow custom account login and add auth page cross-links
|
2026-07-08 10:17:24 +03:00 |
|
|
hikmet4434
|
595321897a
|
Fix admin bootstrap runtime import
|
2026-07-08 09:16:24 +03:00 |
|
|
hikmet4434
|
52b47a4d43
|
Bootstrap configured admin users
|
2026-07-08 07:50:28 +03:00 |
|
|
hikmet4434
|
18aa62d7e1
|
Add public directory for Docker build
|
2026-07-08 07:40:40 +03:00 |
|
|
hikmet4434
|
d57ee5b6a1
|
Fix Docker build dependencies
|
2026-07-08 07:37:11 +03:00 |
|
|
hikmet4434
|
c818ab6f72
|
Update ignored local files
|
2026-07-08 07:14:50 +03:00 |
|
|
hikmet4434
|
1322f5d8cc
|
Add deploy startup seed guard
|
2026-07-07 23:11:36 +03:00 |
|
|
hikmet4434
|
8dd43c57ca
|
Initial WinningHunter MVP
|
2026-07-07 20:40:43 +03:00 |
|