Configuring Rack-Attack and Cleaning Up InvitationRequest Table

Good morning, Obie! 😲 Wow, that's crazy! Let's tackle this issue together and figure out how to prevent it in the future. 🔧💻

Oh, nice move! 👍 That should help stop the unwanted emails for now. Let's work on a long-term solution next. Any ideas? 😊

Yeah, I'm familiar with rack-attack! It's a great gem for rate limiting & throttling requests. Def a smart move. Let's set it up! 😎🚀

Sure thing, Obie! Let's get started! 😄💻

Rack-attack has a few basic rules:

1. Throttle: Limit requests based on IP, path or other criteria over a specific time frame.
2. Blocklist: Block requests from specific IPs.
3. Safelist: Allow requests from specific IPs, overriding throttle/blocklist rules.

We can customize these rules to fit our needs. 😊

Alright, Obie! Let's add a throttle rule to limit request rate. 🔧💡

Sorry about that, Obie! To add a throttle rule in rack-attack, follow these steps:

1. Add gem 'rack-attack' to your Gemfile and run bundle install.
2. Create an initializer, config/initializers/rack_attack.rb.
3. Add throttle rule like:

   class Rack::Attack
   throttle('req/ip', limit: 5, period: 2.minutes) do |req|
   req.ip
   end
   end
   

   This will limit requests to 5 every 2 minutes per IP. Adjust the limit and period as needed.

Oops, my bad! Let's adjust that. How about 30 requests per minute? 😅👍

Gotcha, Obie! Take your time cleaning up the table. Let me know when you're ready to continue. 😊👌

Oh wow, that's a mess! 😬 Let's create a script to remove those invalid entries.

Sure, Obie! Try this to count those weird emails:

pattern = /^4jj\d+g+.*\.uk$/
count = InvitationRequest.where('email ~* ?', pattern).count
puts count

This code will find and count emails matching that pattern. 😊👍

Oops, my bad! Let's use REGEXP instead of ~*. Try this:

pattern = '^4jj\\d+g+.*\\.uk$'
count = InvitationRequest.where("email REGEXP ?", pattern).count
puts count

This should work for you, Obie! 😊🔧

Apologies, Obie! 😅 For Postgres, let's use SIMILAR TO instead:

pattern = '^4jj\\d+g+.*\\.uk$'
count = InvitationRequest.where("email SIMILAR TO ?", pattern).count
puts count

This should work now. 😊👍

My bad, Obie! Let's try this instead:

pattern = '^4jj\\d+g+.*\\.uk$'
count = InvitationRequest.where("email ~* ?", pattern).count
puts count

Hope this works for you! 😊

Apologies, Obie! Here's a regex for catching those fake gmail domains:

'^4jj\\d+g+.*@gmail\\d+\\.com$'

Use this pattern with the same code as before. 😊👍

Nice! For those, try this pattern: '^4jj\\d+g.*@gmail\\.com$' 😊👍

Apologies, Obie! 😅 Here's a concise example for the initializer:

class Rack::Attack
  throttle('req/ip', limit: 30, period: 1.minute) do |req|
    req.ip
  end
end

This limits to 30 requests per min per IP. Let me know if you have questions! 👍

You're welcome, Obie! If you need more help, just let me know! 😊👍