Compare commits

..

No commits in common. "4e99509d9674895e11484412de8984dfb3ed0ad4" and "794b84a15259ccc470fa2fe406e4abbc85eabb1b" have entirely different histories.

3 changed files with 4 additions and 21 deletions

1
.gitignore vendored
View File

@ -8,4 +8,3 @@
!/README.md
!/files/www/qonq.js
!/favicon.ico
!/antiscrape.js

View File

@ -1,15 +0,0 @@
// someone could iterate over all ~1.6 million possible file codes to download all files.
// prevent this by banning IP addresses that request too many non-existant files.
var ip404 = {};
module.exports = (req, res, next) => {
if (ip404[req.ip]?.size > 10)
return res.status(403).send("Banned");
res.on("finish", () => {
if (res.statusCode == 404 && req.filecode) {
if (!ip404[req.ip]) ip404[req.ip] = new Set();
ip404[req.ip].add(req.filecode);
}
});
next();
};

View File

@ -55,17 +55,16 @@ app.post("*", (req, res, next) => {
})();
});
app.use(require("./antiscrape"));
app.get(['/', '/:code/', '/:code/*'], function(req, res, next){
var subdomain = req.subdomains.at(-1);
req.filecode = subdomain || req.params.code;
if (!req.filecode) req.filecode = "www";
var webroot = path.join(FILES_DIR, req.filecode);
var filecode = subdomain || req.params.code;
if (!filecode) filecode = "www";
var webroot = path.join(FILES_DIR, filecode);
fs.readdir(webroot, function(error, webrootdirlist) {
if (error) return void next(error.code == "ENOENT" ? "route" : error);
if (webrootdirlist.length > 1) {
if (subdomain) req.url = path.join(req.filecode, req.url);
if (subdomain) req.url = path.join(filecode, req.url);
next();
} else if (webrootdirlist.length == 1) {
res.sendFile(webrootdirlist[0], {