yanyu/v2board
1
0
Fork 0
mirror of https://github.com/v2board/v2board.git synced 2025-06-17 15:17:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

update: password check limit

Browse Source
This commit is contained in:
tokumeikoi
2022-12-14 22:58:42 +08:00
parent 4398f05b91
commit c36a54dae2
4 changed files with 18 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
app/Http/Controllers/Passport/AuthController.php
View File

@ -190,6 +190,12 @@ class AuthController extends Controller
$email = $request->input('email');
$password = $request->input('password');
$passwordErrorCount = (int)Cache::get('PASSWORD_ERROR_LIMIT') || 0;
if ($passwordErrorCount >= 5) {
abort(500, __('Incorrect email or password'));
}
$user = User::where('email', $email)->first();
if (!$user) {
abort(500, __('Incorrect email or password'));
@ -200,6 +206,12 @@ class AuthController extends Controller
$password,
$user->password)
) {
$passwordErrorCount = Cache::get('PASSWORD_ERROR_LIMIT') || 0;
Cache::put(
CacheKey::get('PASSWORD_ERROR_LIMIT', $email),
(int)$passwordErrorCount + 1,
30 * 60
);
abort(500, __('Incorrect email or password'));
}