Home
last modified time | relevance | path

Searched hist:"563 fb5668f85b2cd8c67a6d8af2d4597cbcfdaa7" (Results 1 – 6 of 6) sorted by relevance

/plugin/captcha/lang/en/
H A Dlang.php563fb5668f85b2cd8c67a6d8af2d4597cbcfdaa7 Thu Jan 22 10:13:15 UTC 2026 Andreas Gohr <gohr@cosmocode.de> Add exponential timeout for failed login attempts

Introduces a configurable brute-force protection mechanism that enforces
increasing wait times between login attempts. The timeout doubles with
each failure (e.g., 5s → 10s → 20s → ...) up to a configurable maximum.

New settings:
- logindenial: Base timeout in seconds (0 to disable)
- logindenial_max: Maximum timeout cap (default 1 hour)

The feature works independently of CAPTCHA protection - failed attempts
are tracked per IP using the existing IpCounter mechanism, and users
are shown the remaining wait time when blocked.

H A Dsettings.php563fb5668f85b2cd8c67a6d8af2d4597cbcfdaa7 Thu Jan 22 10:13:15 UTC 2026 Andreas Gohr <gohr@cosmocode.de> Add exponential timeout for failed login attempts

Introduces a configurable brute-force protection mechanism that enforces
increasing wait times between login attempts. The timeout doubles with
each failure (e.g., 5s → 10s → 20s → ...) up to a configurable maximum.

New settings:
- logindenial: Base timeout in seconds (0 to disable)
- logindenial_max: Maximum timeout cap (default 1 hour)

The feature works independently of CAPTCHA protection - failed attempts
are tracked per IP using the existing IpCounter mechanism, and users
are shown the remaining wait time when blocked.

/plugin/captcha/
H A DIpCounter.php563fb5668f85b2cd8c67a6d8af2d4597cbcfdaa7 Thu Jan 22 10:13:15 UTC 2026 Andreas Gohr <gohr@cosmocode.de> Add exponential timeout for failed login attempts

Introduces a configurable brute-force protection mechanism that enforces
increasing wait times between login attempts. The timeout doubles with
each failure (e.g., 5s → 10s → 20s → ...) up to a configurable maximum.

New settings:
- logindenial: Base timeout in seconds (0 to disable)
- logindenial_max: Maximum timeout cap (default 1 hour)

The feature works independently of CAPTCHA protection - failed attempts
are tracked per IP using the existing IpCounter mechanism, and users
are shown the remaining wait time when blocked.

H A Daction.php563fb5668f85b2cd8c67a6d8af2d4597cbcfdaa7 Thu Jan 22 10:13:15 UTC 2026 Andreas Gohr <gohr@cosmocode.de> Add exponential timeout for failed login attempts

Introduces a configurable brute-force protection mechanism that enforces
increasing wait times between login attempts. The timeout doubles with
each failure (e.g., 5s → 10s → 20s → ...) up to a configurable maximum.

New settings:
- logindenial: Base timeout in seconds (0 to disable)
- logindenial_max: Maximum timeout cap (default 1 hour)

The feature works independently of CAPTCHA protection - failed attempts
are tracked per IP using the existing IpCounter mechanism, and users
are shown the remaining wait time when blocked.

/plugin/captcha/conf/
H A Ddefault.php563fb5668f85b2cd8c67a6d8af2d4597cbcfdaa7 Thu Jan 22 10:13:15 UTC 2026 Andreas Gohr <gohr@cosmocode.de> Add exponential timeout for failed login attempts

Introduces a configurable brute-force protection mechanism that enforces
increasing wait times between login attempts. The timeout doubles with
each failure (e.g., 5s → 10s → 20s → ...) up to a configurable maximum.

New settings:
- logindenial: Base timeout in seconds (0 to disable)
- logindenial_max: Maximum timeout cap (default 1 hour)

The feature works independently of CAPTCHA protection - failed attempts
are tracked per IP using the existing IpCounter mechanism, and users
are shown the remaining wait time when blocked.

H A Dmetadata.php563fb5668f85b2cd8c67a6d8af2d4597cbcfdaa7 Thu Jan 22 10:13:15 UTC 2026 Andreas Gohr <gohr@cosmocode.de> Add exponential timeout for failed login attempts

Introduces a configurable brute-force protection mechanism that enforces
increasing wait times between login attempts. The timeout doubles with
each failure (e.g., 5s → 10s → 20s → ...) up to a configurable maximum.

New settings:
- logindenial: Base timeout in seconds (0 to disable)
- logindenial_max: Maximum timeout cap (default 1 hour)

The feature works independently of CAPTCHA protection - failed attempts
are tracked per IP using the existing IpCounter mechanism, and users
are shown the remaining wait time when blocked.