diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2021-05-28 11:13:28 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-05-28 11:13:28 +0300 |
| commit | fd5fa561389b1e72ddc966e6f575ddfb46072c67 (patch) | |
| tree | 7023ee8f11382ac4ff72d312f7b1bcb77b719c0a /page-education.php | |
| parent | 32f5772c9fdd641ba68112dbf29074fe05758c43 (diff) | |
Fix several security concerns (#1471)
* Use REMOTE_ADDR field
The other ones are not used at all. This would allow someone to spoof
the configured IP address and bypass any rate limit.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add basic ratelimiting class
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Remove Mautic submission form
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Replace captcha with ratelimiter
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Space + tabs
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Dont check if no REDIS is defined in config
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
Diffstat (limited to 'page-education.php')
| -rw-r--r-- | page-education.php | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/page-education.php b/page-education.php index c387a78f..1b3f2e9e 100644 --- a/page-education.php +++ b/page-education.php @@ -11,7 +11,6 @@ require(["require.config"], function() { <meta name="twitter:image" content="<?php echo get_template_directory_uri(); ?>/assets/img/features/moodle-nw.png"> <meta name="twitter:image:src" content="<?php echo get_template_directory_uri(); ?>/assets/img/features/moodle-nw.png"> <meta property="og:image" content="<?php echo get_template_directory_uri(); ?>/assets/img/features/moodle-nw.png"> -<!-- <script src='https://www.google.com/recaptcha/api.js'></script> --> </head> <div class="education-background second-menu"> <div class="container-fluid background"> @@ -202,11 +201,6 @@ require(["require.config"], function() { <h2 class=""><?php echo $l->t('How the TU Berlin delivers file sync and share to 22.000 users');?></h2> <form name="whitepaper" method="post" action="<?php echo home_url('whitepaper-submit') ?>"> <p><label for="email"><?php echo $l->t('Download our free case study: <br /> TU Berlin and 9 other institutions migrate from ownCloud to Nextcloud');?><br> - <td colspan="2" style="text-align:center"> - <div class=""> - <div class="g-recaptcha" data-sitekey="<?php echo RECAPTCHA_SITEKEY; ?>"></div> - </div> - </td> <input type="hidden" name="segmentId" value="5"> <input type="hidden" name="firstname" value=""> <input type="hidden" name="requesttime" value="<?php echo time(); ?>"> |