]> source.dussan.org Git - nextcloud-server.git/commit
Mark IP as whitelisted if brute force protection is disabled
authorLukas Reschke <lukas@statuscode.ch>
Mon, 1 May 2017 16:31:45 +0000 (18:31 +0200)
committerLukas Reschke <lukas@statuscode.ch>
Mon, 1 May 2017 16:31:45 +0000 (18:31 +0200)
commita5ccb31e85bc4b471ac64d69551d02ae8a2e39e1
treef184dd1b84f9cfc93e30ad43cb5feab0ab18c3f0
parenta2f6fea4081e7920ed6cd33a96e2b80dc0c51303
Mark IP as whitelisted if brute force protection is disabled

Currently, when disabling the brute force protection no new brute force attempts are logged. However, the ones logged within the last 24 hours will still be used for throttling.

This is quite an unexpected behaviour and caused some support issues. With this change when the brute force protection is disabled also the existing attempts within the last 24 hours will be disregarded.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
lib/private/Security/Bruteforce/Throttler.php
tests/lib/Security/Bruteforce/ThrottlerTest.php