Release v1.5.1

plugins/support/SupportController.php

@@ -7,6 +7,7 @@ use Core\Http\Response;
 use Core\Services\Auth;
 use Core\Services\Database;
 use Core\Services\Mailer;
+use Core\Services\RateLimiter;
 use Core\Services\Settings;
 use Core\Views\View;
 use PDO;
@@ -64,6 +65,10 @@ class SupportController
         if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
             return new Response('', 302, ['Location' => '/contact?error=Please+enter+a+valid+email']);
         }
+        $limitKey = sha1(strtolower($email) . '|' . $this->clientIp());
+        if (RateLimiter::tooMany('support_contact_submit', $limitKey, 5, 600)) {
+            return new Response('', 302, ['Location' => '/contact?error=Too+many+support+requests.+Please+wait+10+minutes']);
+        }
         foreach ($requiredFields as $requiredField) {
             if (($extraValues[(string)$requiredField] ?? '') === '') {
                 return new Response('', 302, ['Location' => '/contact?error=' . urlencode('Please complete all required fields for this support type')]);