Rails Rate Limiting
Setting the Scene I noticed a lot of new “users” in one of my side projects, and immediately wondered what was going on, was this it, had I finally struck the startup gold?! Obviously I hadn’t, but nice to dream for a moment. On closer inspection, I noticed a barrage of posts to my sign-in form with interesting user names like these: "cmee7uvb'; waitfor delay '0:0:15' --", "0qjninbk' or 915=(select 915 from pg_sleep(15))--", "a77t30jc'; waitfor...