Static reason for login failure to prevent bruteforce
This commit is contained in:
@@ -140,7 +140,7 @@ class Login extends BaseModule
|
|||||||
}
|
}
|
||||||
} catch (Exception $e) {
|
} catch (Exception $e) {
|
||||||
logger('authenticate: failed login attempt: ' . notags($username) . ' from IP ' . $_SERVER['REMOTE_ADDR']);
|
logger('authenticate: failed login attempt: ' . notags($username) . ' from IP ' . $_SERVER['REMOTE_ADDR']);
|
||||||
info('Login failed: ' . $e->getMessage() . EOL);
|
info('Login failed. Please check your credentials.' . EOL);
|
||||||
goaway();
|
goaway();
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user