Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Anti bruteforce improvement #4496

Merged

Conversation

corentin-soriano
Copy link
Contributor

Increase IP limit to 30 failures because we can't reset it.

Administrators/managers can see if an account is locked and can unlock it immediately:
image

Users can unlock their accounts with a single-use link sent by email:
image

Fix email incorrect format using $antiXss->xss_clean() instead of htmlspecialchars() (#4483, #4482).

@nilsteampassnet nilsteampassnet merged commit 7f72d3c into nilsteampassnet:master Nov 26, 2024
1 check passed
@corentin-soriano corentin-soriano deleted the anti_bruteforce branch November 27, 2024 07:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants