Circumventing the 3-reply limit

sam · December 3, 2023, 11:07pm

I think a different type of limit should address this griefing:

lib/validators/post_validator.rb

aba3acf4c


      
          last_posts_count =
            DB.query_single(
              <<~SQL,
            SELECT COUNT(*)
            FROM (
              SELECT user_id
                FROM posts
               WHERE deleted_at IS NULL
                 AND NOT hidden
                 AND topic_id = :topic_id
               ORDER BY post_number DESC
               LIMIT :max_replies
            ) c
            WHERE c.user_id = :user_id
          SQL
              topic_id: post.topic_id,
              user_id: post.acting_user.id,
              max_replies: SiteSetting.max_consecutive_replies,
            ).first

github.com/discourse/discourse

lib/guardian/post_guardian.rb

aba3acf4c


      
          SiteSetting.max_post_deletions_per_minute < 1 ||
            SiteSetting.max_post_deletions_per_day < 1

You can set max_post_deletions_per_day a lot lower. It is already set to 10 so this can only happen 10 times?

Also agree with @Stephen that in this specific case, if it pops up it should just fall into … member is acting in an abusive way and handle by banning.

We deliberately allow this pattern in the code for extreme edge cases.

Topic		Replies	Views
Limit consecutive replies for topic owner? Product Support	8	1728	December 6, 2018
Allowing more than 3 replies in a row Product Support	2	846	June 9, 2022
No more than 3 consecutive replies? Product Support	2	428	August 1, 2023
Post deletions rate limit per day not working Bug	5	1524	July 3, 2018
Reply Limit Problem Product Support	19	2325	March 19, 2021

Circumventing the 3-reply limit

Related topics