[closed]

[finite thorn]

launching in 2 days, signup asap!

[finite thorn]

The site is now live! Sign up and sell your assets to a global market!

[umbral igloo]

what data are the websites claims based on?

[finite thorn]

All of them are based on real stats, except on the sign up page where we are using test data values since we opened to the public today and it needs to be switched over to production data once it populates

[umbral igloo]

real stats while having launched just today? 🤔

[finite thorn]

Yes, we had a pre sign up phase if you scroll up

[urban granite]

Real question is why are you sending a discord webhook when people sign up

Also I saw that you send the welcome email from the client, this is able to be used to rack up server expenses

[finite thorn]

We use discord webhooks for platform events so we can keep track of anything that would need attention such as new seller applications, basically a logging system

[urban granite]

Why not just have server logs setup internally on the server instead of relying on a discord channel

[finite thorn]

We have both but discord is a easy way to get notifications on mobile

Anything that’s done site wide is logged to our db and then important events are sent to the webhooks

[urban granite]

This is open for abuse btw

[finite thorn]

However I should move it to server side

Doing it right now

Thank you for spotting it

[urban granite]

person could input any email they want and spam it, no rate limit directly on that endpoint

[finite thorn]

Thats true, welcome emails have rate limiting but not discord webhooks, we are moving it to the server now and will only get triggered by server events that require it, no client involved, so no need for rate limits on that directly

I would appreciate if you could join our discord and let me know of any other issues if you find them, there can be a reward included once we get the site running better :)

[urban granite]

there is a rate limit for api keys, but the welcome email endpoint does not require an api key

still successfully sends if you do not have the api key header

[finite thorn]

Should be fixed now 👍

[finite thorn]

[closed]