My website is being nuked by new signups and new posts some of which don't even have user.id associated with.

How do I solve this? What code should I add to the user#new page and/or post#new page.

If it would help, please check my repo: https://github.com/nixor/cpblog

  • you posted your project without posting the location of the vulnerable code. I'm going to dig around in your project. You should be more helpful.
    – rook
    Dec 2, 2012 at 0:55
  • 2
    Also who cares if they use curl, they could be using netcat or python httplib. That doesn't matter.
    – rook
    Dec 2, 2012 at 1:07

1 Answer 1


I have not looked into your code, but the things I would do are:

  • checking the eligibility of the user to do anything on your website before making that user makes an action. (If somebody posting something without even registering in the site - it is no good).
  • to prevent from the new signup the common practice is to confirm yourself using a mail account or an account from high profile resources google acount, fb account.

Not the answer you're looking for? Browse other questions tagged .