Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Login Attempts #3

Open
wojo0011 opened this issue Mar 24, 2017 · 0 comments
Open

Login Attempts #3

wojo0011 opened this issue Mar 24, 2017 · 0 comments

Comments

@wojo0011
Copy link

In Laravel 5.4 during login screen the max login attempts is being ignored. No recaptcha is being used on the login page only the register page. However a malicious user can attack the login page if no recaptcha is being used on that page as this tool is over riding the ability to remember values of the number of login attempts probably due to the way the page is being reloaded. (Not sure). But in the login function this line of code:

if ($this->hasTooManyLoginAttempts($request)) ...
$this->incrementLoginAttempts($request); ...

seems to not remember the Login Attempts. It does seem run the code but does not remember the previous login attempt.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant