website/views/user.py (1)

191-201: Consider using a dedicated rate limiting library.

While the current cache-based implementation works, consider using a well-tested library like django-ratelimit for more robust rate limiting with better handling of edge cases, distributed systems support, and configurable backends.

Example with django-ratelimit:

First, install the package:

pip install django-ratelimit

Then apply this refactor:

+from django_ratelimit.decorators import ratelimit
+from django_ratelimit.exceptions import Ratelimited

 @login_required
+@ratelimit(key='user', rate='1/60s', method='POST', block=False)
 def profile_edit(request):
     from allauth.account.models import EmailAddress
     from allauth.account.utils import send_email_confirmation
 
     Tag.objects.get_or_create(name="GSOC")
     user_profile, created = UserProfile.objects.get_or_create(user=request.user)
 
     # Get the user's current email BEFORE changes
     original_email = request.user.email
 
     if request.method == "POST":
+        # Check if rate limited
+        if getattr(request, 'limited', False):
+            messages.error(
+                request,
+                "You are doing that too often. Please wait a minute before trying again.",
+            )
+            return redirect("profile", slug=request.user.username)
+
         form = UserProfileForm(request.POST, request.FILES, instance=user_profile)
 
         if form.is_valid():
             ...
             if email_changed:
                 # Remove any pending unverified emails
                 EmailAddress.objects.filter(user=request.user, verified=False).delete()
 
                 # Create new unverified email entry
                 EmailAddress.objects.update_or_create(
                     user=request.user,
                     email=new_email,
                     defaults={"verified": False, "primary": False},
                 )
 
-                # Rate limit:
-                rate_key = f"email_verification_rate_{request.user.id}"
-                if cache.get(rate_key):
-                    messages.error(
-                        request,
-                        "You are doing that too often. Please wait a minute before trying again.",
-                    )
-                    return redirect("profile", slug=request.user.username)
-
-                # Set limit for 60 seconds
-                cache.set(rate_key, True, timeout=60)
-
                 # Send verification email
                 try:
                     send_email_confirmation(request, request.user, email=new_email)

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Knowledge base: Disabled due to Reviews -> Disable Knowledge Base setting