irrlicht
1313e9613c
- SQLite-DSN: busy_timeout(5000) + WAL + foreign_keys gegen SQLITE_BUSY - uid ist nie 0 mehr (0 = Sentinel für gelöscht/anonym), Retry bei Kollision - scanEntries gibt Scan-Fehler zurück statt Zeilen still zu überspringen - Session-timeout serverseitig auf 30 Tage gedeckelt (clientgesteuert) - Bild-Upload: Dimensionen vor Decode prüfen (Decompression-Bomb-Schutz) - Secure-Cookie via TLS-Erkennung (r.TLS / X-Forwarded-Proto) - Rate-Limit (httprate, 20/min/IP) auf Login & Registrierung - Vote nur auf existierende Beiträge (keine Waisen-Votes) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
66 lines
1.6 KiB
Go
66 lines
1.6 KiB
Go
package main
|
|
|
|
import (
|
|
"database/sql"
|
|
|
|
_ "modernc.org/sqlite"
|
|
)
|
|
|
|
var db *sql.DB
|
|
|
|
const schema = `
|
|
CREATE TABLE IF NOT EXISTS user (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
uid INTEGER UNIQUE,
|
|
username TEXT UNIQUE,
|
|
password BLOB,
|
|
created_at INTEGER,
|
|
last_login INTEGER
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS session (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
uid INTEGER,
|
|
value TEXT UNIQUE,
|
|
created_at INTEGER,
|
|
expires INTEGER,
|
|
description TEXT
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS entry (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
pid INTEGER UNIQUE NOT NULL,
|
|
uid INTEGER NOT NULL,
|
|
created_at INTEGER NOT NULL,
|
|
content TEXT NOT NULL DEFAULT '',
|
|
filepath TEXT NOT NULL DEFAULT '',
|
|
reply_to INTEGER NOT NULL DEFAULT 0,
|
|
reply_count INTEGER NOT NULL DEFAULT 0,
|
|
last_activity INTEGER NOT NULL DEFAULT 0,
|
|
deleted INTEGER NOT NULL DEFAULT 0
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS vote (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
uid INTEGER,
|
|
pid INTEGER,
|
|
mode TEXT,
|
|
UNIQUE(uid, pid)
|
|
);
|
|
`
|
|
|
|
func initDB(dsn string) error {
|
|
var err error
|
|
// SQLite hat genau einen Schreiber: busy_timeout wartet bei Sperren, statt
|
|
// sofort mit SQLITE_BUSY zu scheitern; WAL erlaubt parallele Leser.
|
|
db, err = sql.Open("sqlite", dsn+"?_pragma=busy_timeout(5000)&_pragma=journal_mode(WAL)&_pragma=foreign_keys(on)")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err = db.Ping(); err != nil {
|
|
return err
|
|
}
|
|
_, err = db.Exec(schema)
|
|
return err
|
|
}
|