From 0fd6721752f05e8a201c6fbb4ee3fd3647e105d2 Mon Sep 17 00:00:00 2001
From: aamoghS <aamoghsawantt@gmail.com>
Date: Tue, 17 Feb 2026 18:49:22 -0500
Subject: [PATCH 1/2] ok

---
 .gitignore                                    |   2 +
 packages/api/src/middleware/security.ts       |  12 +--
 sites/mainweb/components/Card/index.tsx       |  92 ----------------
 sites/mainweb/components/EventCard/index.tsx  |  40 -------
 .../components/InlineRadioInput/index.tsx     |  50 ---------
 sites/mainweb/components/InputField/index.tsx | 102 ------------------
 .../components/LearnMore/LearnMore.tsx        |  38 -------
 sites/mainweb/lib/trpc.tsx                    |  48 +--------
 sites/mainweb/next.config.mjs                 |  15 +++
 9 files changed, 24 insertions(+), 375 deletions(-)
 delete mode 100644 sites/mainweb/components/Card/index.tsx
 delete mode 100644 sites/mainweb/components/EventCard/index.tsx
 delete mode 100644 sites/mainweb/components/InlineRadioInput/index.tsx
 delete mode 100644 sites/mainweb/components/InputField/index.tsx
 delete mode 100644 sites/mainweb/components/LearnMore/LearnMore.tsx

diff --git a/.gitignore b/.gitignore
index 72ed689..cf35c41 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,7 +25,9 @@ nul
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
+yarn-error.log*
 .pnpm-debug.log*
+*.log
 
 # Local env files
 .env
diff --git a/packages/api/src/middleware/security.ts b/packages/api/src/middleware/security.ts
index 5329ed0..e08ef87 100644
--- a/packages/api/src/middleware/security.ts
+++ b/packages/api/src/middleware/security.ts
@@ -22,12 +22,12 @@ const ipTrackingStore = new Map<string, IPRecord>();
 
 // DDoS Protection Constants
 const DDOS_CONFIG = {
-  maxRequestsPerMinute: 120, // Max requests per minute per IP
-  suspiciousThreshold: 100, // Requests that trigger suspicious flag
-  blockDurationMs: 5 * 60 * 1000, // 5 minutes block for suspicious IPs
-  burstThreshold: 30, // Max requests in 5 seconds
-  burstWindowMs: 5 * 1000, // 5 second burst window
-  cleanupIntervalMs: 60 * 1000, // Cleanup every minute
+  maxRequestsPerMinute: 3000, // Increased for venue WiFi (100 judges @ 30rpm)
+  suspiciousThreshold: 2000,
+  blockDurationMs: 5 * 60 * 1000,
+  burstThreshold: 500, // Allow 100 concurrent page loads
+  burstWindowMs: 5 * 1000,
+  cleanupIntervalMs: 60 * 1000,
 };
 
 // Cleanup expired records
diff --git a/sites/mainweb/components/Card/index.tsx b/sites/mainweb/components/Card/index.tsx
deleted file mode 100644
index b2d52d5..0000000
--- a/sites/mainweb/components/Card/index.tsx
+++ /dev/null
@@ -1,92 +0,0 @@
-"use client";
-
-import { useState, ReactNode } from "react";
-import Image, { StaticImageData } from "next/image";
-
-interface CardProps {
-  img?: string | StaticImageData;
-  imgClassName?: string;
-  heading?: string;
-  linkUrl?: string;
-  children?: ReactNode;
-  className?: string;
-}
-
-export default function Card({ img, imgClassName = "", heading, linkUrl, children, className = "" }: CardProps) {
-  const [imgError, setImgError] = useState(false);
-
-  // Compute initials from heading to use in the fallback placeholder
-  const initials = heading
-    ? heading
-        .split(/\s+/)
-        .slice(0, 2)
-        .map((w) => w[0])
-        .join("")
-        .toUpperCase()
-    : "PG"; // PG = Project
-
-  return (
-    <div
-      className={`glass-card text-white rounded-xl shadow-lg overflow-hidden flex flex-col justify-between transition-all duration-300 hover:-translate-y-1 ${className}`}
-    >
-      {/* Image */}
-      {img && (
-        <div className="relative w-full h-40 overflow-hidden border-b border-white/10 flex items-center justify-center bg-black">
-          {!imgError ? (
-            <Image
-              src={img} // works with both string and StaticImageData
-              alt={heading || "Project image"}
-              className={`object-contain w-4/5 h-full ${imgClassName}`}
-              width={400}
-              height={160}
-              onError={(e) => {
-                // log for easier debugging and show the fallback
-                // eslint-disable-next-line no-console
-                console.error("Project image failed to load:", heading, e);
-                setImgError(true);
-              }}
-              // keep placeholder prop for optimization while handling potential failures
-              placeholder="empty"
-            />
-          ) : (
-            // Fallback: simple SVG with initials so something meaningful is always visible
-            <div className="w-full h-full flex items-center justify-center p-4 bg-white/5" role="img" aria-label={`${heading} placeholder` }>
-              <svg width="120" height="80" viewBox="0 0 120 80" fill="none" xmlns="http://www.w3.org/2000/svg" aria-hidden>
-                <rect width="120" height="80" rx="8" fill="#0f172a" />
-                <text x="50%" y="55%" dominantBaseline="middle" textAnchor="middle" fill="#74b1aa" fontSize="20" fontFamily="Inter, ui-sans-serif, system-ui">{initials}</text>
-              </svg>
-            </div>
-          )}
-        </div>
-      )}
-
-      {/* Content */}
-      <div className="flex flex-col flex-grow p-5">
-        {/* Heading */}
-        {heading && (
-          <div className="mb-2">
-            {linkUrl ? (
-              <a
-                href={linkUrl}
-                target="_blank"
-                rel="noopener noreferrer"
-                className="text-[#74b1aa] text-xl font-semibold hover:underline"
-              >
-                {heading}
-              </a>
-            ) : (
-              <h1 className="text-[#74b1aa] text-xl font-semibold">{heading}</h1>
-            )}
-          </div>
-        )}
-
-        {/* Description */}
-        {children && (
-          <div className="text-gray-300 text-sm leading-snug flex-grow">
-            {children}
-          </div>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/sites/mainweb/components/EventCard/index.tsx b/sites/mainweb/components/EventCard/index.tsx
deleted file mode 100644
index 7018b3b..0000000
--- a/sites/mainweb/components/EventCard/index.tsx
+++ /dev/null
@@ -1,40 +0,0 @@
-// components/EventCard/index.tsx
-"use client";
-
-import Image, { StaticImageData } from "next/image";
-import Link from "next/link";
-
-interface EventCardProps {
-  img: string | StaticImageData;
-  heading: string;
-  when?: string;
-  button_text: string;
-  button_to: string;
-  target?: string;
-  rel?: string;
-  className?: string;
-  children: React.ReactNode;
-}
-
-const EventCard = ({ img, heading, when, button_text, button_to, target, rel, className, children }: EventCardProps) => {
-  const isExternal = button_to.startsWith("http");
-  const outTarget = isExternal ? target ?? "_blank" : target;
-  const outRel = isExternal ? rel ?? "noopener noreferrer" : rel;
-  return (
-    <div className={`flex flex-col justify-between bg-gray-900 text-white rounded-xl overflow-hidden shadow-lg transition-transform hover:-translate-y-1 w-full h-full ${className ?? ""}`}>
-      <div className="relative w-full h-48">
-        <Image src={img} alt={heading} fill className="object-cover" />
-      </div>
-      <div className="p-4 flex flex-col gap-2">
-        <h3 className="text-xl font-bold">{heading}</h3>
-        {when && <span className="text-sm text-gray-400">{when}</span>}
-        <p className="text-sm text-gray-200">{children}</p>
-        <Link href={button_to} className="mt-4 inline-block text-teal-500 font-bold hover:text-teal-400" target={outTarget} rel={outRel}>
-          {button_text}
-        </Link>
-      </div>
-    </div>
-  );
-};
-
-export default EventCard;
diff --git a/sites/mainweb/components/InlineRadioInput/index.tsx b/sites/mainweb/components/InlineRadioInput/index.tsx
deleted file mode 100644
index f8ca83d..0000000
--- a/sites/mainweb/components/InlineRadioInput/index.tsx
+++ /dev/null
@@ -1,50 +0,0 @@
-"use client";
-
-import { ChangeEvent } from "react";
-
-interface InlineRadioInputProps {
-  color: string;
-  label: string;
-  value: string;
-  name: string;
-  onChange: (e: ChangeEvent<HTMLInputElement>) => void;
-  type?: string;
-  checked?: boolean;
-}
-
-export default function InlineRadioInput({
-  color,
-  label,
-  value,
-  name,
-  onChange,
-  type = "radio",
-  checked = false,
-}: InlineRadioInputProps) {
-  const id = `${label.replaceAll(" ", "-")}-${name.replaceAll(" ", "-")}`;
-
-  return (
-    <div className="inline-block">
-      <input
-        id={id}
-        type={type}
-        name={name}
-        value={value}
-        className="hidden"
-        onChange={onChange}
-        checked={checked}
-      />
-      <label
-        htmlFor={id}
-        className={`block px-3 py-1 rounded-lg font-normal cursor-pointer transition-all duration-300 hover:-translate-y-1`}
-        style={{
-          backgroundColor: checked ? color : "#eee",
-          borderColor: color,
-          color: checked ? "#fff" : "#000",
-        }}
-      >
-        {label}
-      </label>
-    </div>
-  );
-}
diff --git a/sites/mainweb/components/InputField/index.tsx b/sites/mainweb/components/InputField/index.tsx
deleted file mode 100644
index 83704a8..0000000
--- a/sites/mainweb/components/InputField/index.tsx
+++ /dev/null
@@ -1,102 +0,0 @@
-"use client";
-
-import { ChangeEvent } from "react";
-
-interface InputFieldProps {
-  width?: string | number;
-  placeholder?: string;
-  name?: string;
-  helper?: boolean;
-  validIndication?: boolean;
-  type?: "text" | "email" | "password" | "submit" | "textarea";
-  required?: boolean;
-  onChange?: (e: ChangeEvent<HTMLInputElement | HTMLTextAreaElement>) => void;
-  pattern?: string;
-  originalValue?: string;
-  onClick?: () => void;
-  helperText?: string;
-}
-
-export default function InputField({
-  width = "300px",
-  placeholder = "",
-  name,
-  helper,
-  validIndication,
-  type = "text",
-  required,
-  onChange,
-  pattern,
-  originalValue,
-  onClick,
-  helperText,
-}: InputFieldProps) {
-  const id = name || placeholder.replaceAll(" ", "");
-
-  if (type === "submit") {
-    return (
-      <div
-        data-testid="InputField"
-        style={{ width }}
-        className="my-4 h-15"
-      >
-        <input
-          id={id}
-          type="submit"
-          onClick={onClick}
-          name={id}
-          autoComplete={id}
-          value={placeholder || "Submit"}
-          className="w-full h-full px-4 py-2 border-2 border-white rounded-lg text-white bg-transparent text-lg font-medium cursor-pointer transition-all duration-300 hover:bg-white hover:text-black active:scale-95"
-        />
-      </div>
-    );
-  }
-
-  if (type === "textarea") {
-    return (
-      <div data-testid="InputField" style={{ width }} className="relative my-3">
-        {helperText && <p className="text-sm text-green-500 mb-1">{helperText}</p>}
-        <textarea
-          id={id}
-          placeholder=" "
-          onChange={onChange}
-          value={originalValue}
-          className="w-full h-48 px-4 py-3 rounded-lg border-2 border-white bg-transparent text-white placeholder-transparent focus:outline-none focus:border-teal-400 transition-all"
-        />
-        <label
-          htmlFor={id}
-          className="absolute top-3 left-4 text-white text-lg pointer-events-none transition-all duration-300"
-        >
-          {placeholder}
-        </label>
-      </div>
-    );
-  }
-
-  return (
-    <div data-testid="InputField" style={{ width }} className="relative my-3">
-      {helperText && <p className="text-sm text-green-500 mb-1">{helperText}</p>}
-      <input
-        id={id}
-        name={id}
-        autoComplete={id}
-        type={type}
-        placeholder=" "
-        required={required}
-        onChange={onChange}
-        pattern={pattern}
-        value={originalValue}
-        className={`w-full px-4 py-2 rounded-lg border-2 bg-transparent placeholder-transparent text-white focus:outline-none transition-all duration-300 ${
-          validIndication ? "border-green-500" : "border-white"
-        }`}
-      />
-      <label
-        htmlFor={id}
-        className="absolute top-2 left-4 text-white text-lg pointer-events-none transition-all duration-300"
-      >
-        {placeholder}
-      </label>
-    </div>
-  );
-}
diff --git a/sites/mainweb/components/LearnMore/LearnMore.tsx b/sites/mainweb/components/LearnMore/LearnMore.tsx
deleted file mode 100644
index 7478566..0000000
--- a/sites/mainweb/components/LearnMore/LearnMore.tsx
+++ /dev/null
@@ -1,38 +0,0 @@
-import Link from "next/link";
-
-interface LearnMoreProps {
-  to: string;
-  children: React.ReactNode;
-  target?: string;
-  rel?: string;
-}
-
-const LearnMore = ({ to, children, target, rel }: LearnMoreProps) => {
-  const isExternal = to.startsWith("http");
-
-  const baseClasses =
-    "inline-block relative text-teal-600 transition-colors duration-300 hover:text-teal-600";
-  const arrowClasses =
-    "inline-block pl-1 transition-all duration-300 group-hover:pl-3";
-
-  if (isExternal) {
-    const outTarget = target ?? "_blank";
-    const outRel = rel ?? "noopener noreferrer";
-
-    return (
-      <a href={to} target={outTarget} rel={outRel} className={`${baseClasses} group`}>
-        {children}
-        <span className={arrowClasses}>→</span>
-      </a>
-    );
-  }
-
-  return (
-    <Link href={to} scroll={false} className={`${baseClasses} group`} target={target} rel={rel}>
-      {children}
-      <span className={arrowClasses}>→</span>
-    </Link>
-  );
-};
-
-export default LearnMore;
diff --git a/sites/mainweb/lib/trpc.tsx b/sites/mainweb/lib/trpc.tsx
index a6c5782..1769fb4 100644
--- a/sites/mainweb/lib/trpc.tsx
+++ b/sites/mainweb/lib/trpc.tsx
@@ -1,52 +1,6 @@
 "use client";
 
 import { createTRPCReact } from "@trpc/react-query";
-import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
-import { httpBatchLink } from "@trpc/client";
-import { useState } from "react";
 import type { AppRouter } from "@query/api";
-import superjson from "superjson";
 
-export const trpc = createTRPCReact<AppRouter>();
-
-function getBaseUrl() {
-  if (typeof window !== "undefined") return "";
-  // Cloud Run / Firebase App Hosting
-  if (process.env.AUTH_URL) return process.env.AUTH_URL;
-  if (process.env.NEXT_PUBLIC_APP_URL) return process.env.NEXT_PUBLIC_APP_URL;
-  return `http://localhost:${process.env.PORT ?? 3000}`;
-}
-
-export function TRPCProvider({ children }: { children: React.ReactNode }) {
-  const [queryClient] = useState(() => new QueryClient({
-    defaultOptions: {
-      queries: {
-        staleTime: 60 * 1000, // 1 minute
-      },
-    },
-  }));
-
-  const [trpcClient] = useState(() =>
-    trpc.createClient({
-      links: [
-        httpBatchLink({
-          url: `${getBaseUrl()}/api/trpc`,
-          transformer: superjson,
-          headers() {
-            return {
-              'x-trpc-source': 'react',
-            };
-          },
-        }),
-      ],
-    })
-  );
-
-  return (
-    <QueryClientProvider client={queryClient}>
-      <trpc.Provider client={trpcClient} queryClient={queryClient}>
-        {children}
-      </trpc.Provider>
-    </QueryClientProvider>
-  );
-}
\ No newline at end of file
+export const trpc = createTRPCReact<AppRouter>();
\ No newline at end of file
diff --git a/sites/mainweb/next.config.mjs b/sites/mainweb/next.config.mjs
index cdbcc4d..7f50ae1 100644
--- a/sites/mainweb/next.config.mjs
+++ b/sites/mainweb/next.config.mjs
@@ -10,6 +10,21 @@ const nextConfig = {
   transpilePackages: ["@query/api", "@query/auth", "@query/db", "@query/ui"],
   outputFileTracingRoot: path.join(__dirname, '../../'),
   typescript: { ignoreBuildErrors: true },
+  async headers() {
+    return [
+      {
+        source: '/:path*',
+        headers: [
+          { key: 'X-DNS-Prefetch-Control', value: 'on' },
+          { key: 'Strict-Transport-Security', value: 'max-age=63072000; includeSubDomains; preload' },
+          { key: 'X-XSS-Protection', value: '1; mode=block' },
+          { key: 'X-Frame-Options', value: 'SAMEORIGIN' },
+          { key: 'X-Content-Type-Options', value: 'nosniff' },
+          { key: 'Referrer-Policy', value: 'origin-when-cross-origin' },
+        ],
+      },
+    ];
+  },
 };
 
 export default nextConfig; // Change from module.exports
\ No newline at end of file

From 2c58cb329d46ab44658ca3c281b5aff9710ff1b6 Mon Sep 17 00:00:00 2001
From: aamoghS <aamoghsawantt@gmail.com>
Date: Tue, 17 Feb 2026 18:58:47 -0500
Subject: [PATCH 2/2] ok

---
 packages/api/src/middleware/security.ts | 4 ++--
 packages/api/src/trpc.ts                | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/api/src/middleware/security.ts b/packages/api/src/middleware/security.ts
index e08ef87..45f6aa3 100644
--- a/packages/api/src/middleware/security.ts
+++ b/packages/api/src/middleware/security.ts
@@ -106,8 +106,8 @@ export function rateLimit(
 
 export const RATE_LIMITS = {
   public: {
-    maxTokens: 30,
-    refillRate: 0.5,
+    maxTokens: 1000,
+    refillRate: 50,
     queryTokens: 1,
     mutationTokens: 3,
   },
diff --git a/packages/api/src/trpc.ts b/packages/api/src/trpc.ts
index 1dbd628..4a9c758 100644
--- a/packages/api/src/trpc.ts
+++ b/packages/api/src/trpc.ts
@@ -94,7 +94,7 @@ export const publicProcedure = t.procedure
       });
     }
 
-    const identifier = ctx.userId || `anon-${ctx.session?.user?.id || 'unknown'}`;
+    const identifier = ctx.userId || `ip-${ctx.clientIp}`;
     const config = RATE_LIMITS.public;
     const tokens = type === 'mutation' ? config.mutationTokens : config.queryTokens;