如何保护不需要POST和GET的Django Deliciouspie REST API

Question

Hi am having an API url when a user submits the page, URL will be called and POSTED data will be saved in DB through tastypie api.

My question here is,

Am not using credentials while POSting data since it is a form submission, so when an intruder comes to know about my API url and data to be posted he can post bulk amount of data to my DB and crash it,right?

How to prevent this or it is already prevented by any measure,Please Explain.

Thanks.

Answer 1

我尚未与stylishpie合作，但他们的文档中有一个身份验证和授权部分 。

Answer 2

If you need to allow people to POST with no auth, then there is nothing you can do to prevent someone just POSTing random data. What you can do is throttling the user so they don't post that much data.

http://django-tastypie.readthedocs.org/en/latest/throttling.html