me when I open wasteof after dinner

sorry y’all. in hindsight anonymous posting was a very bad idea, and not having cors on the endpoint was even worse. I turned it off and won’t turn it back on again, the GitHub repo was already private bc I forgot to not commit .env. Sorry @jeffalo and everyone else who was spammed

😅

May 17, 2022, 11:08 PM
11 2 11

comments

wdym you turned off cors on an endpoint

I made a website with backend to post on the @anonymous account. Someone made a script to spam my cors-Iess endpoint. Wasteof got spammed

Aha! You can get their ip, send it to jeffalo, have jeffalo ban the ip and realize that its kinda evil to do this!

it doesn’t grab ip’s thats the thing

technically every website you use has your ip (I think?)

I didn't make it get their ip

yeah but replit doesn’t automatically give the ip of the user who uses the repl to the repl owner (which is the same is ip grabbing with a link)

I forgot it was on replit :/

every website has access to your ip, that’s correct. Websites hosted with a server have much easier access than just html sites, and wasteof is a server site obviously