Some methods constantly being called by bad guy. How to prevent it?


#1

See this video:

I consoled log every method with the name of method and parameter when they being called.

2 methods (AVCount and Hilo) constantly being called

Hilo royal-crown-hotels-siem-reap-books.html
AVCount royal-crown-hotels-siem-reap-books.html profile

royal-crown-hotels-siem-reap-books.html is a parameter that I don’t have even one in my code. So I’m 100% sure this is from bad guy

Any idea how to prevent this?

Thank you


#2

Changing method name work. But I guess this is temporary solution. Meteor should have an elegant solution to prevent this condition.

This is method call that being abused. What if that bad guy choose to abuse an expensive one like pub/sub?


#3

Have you looked into Meteor’s Method rate limiting feature?


#4

Maybe this also can help you out?


#5

Thank @hwillson @tcastelli, I’ll try them out