Skip to content

Add an administration interface for hidden flood control variables in Backdrop.

License

Notifications You must be signed in to change notification settings

backdrop-contrib/flood_control

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

15 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Flood control

Add an administration interface for hidden variables that limit login attempts and contact form submissions in Backdrop.

Login attempts and contact form submissions have thresholds saying that each user can only do that event a certain number of times in a set window. Various core functions verify that users have not exceeded thresholds for form submissions, but it does not expose the values of those thresholds or provide an interface for them to be changed.

By default Backdrop allows up to 50 failed login attempts regardless of the username within a 1 hour window. For a specific username, 5 failed login attempts within 6 hours causes the username to be temporarily blocked.

Hidden variables exposed by this module

user.flood

  • flood_ip_limit (default 50 attempts)
  • flood_ip_window (default 1 hour)
  • flood_uid_only (default false)
  • flood_user_limit (default 5 attempts)
  • flood_user_window (default 6 hours)

contact.settings

  • contact_threshold_limit
  • contact_threshold_window

Current Maintainer

  • None

Credits

License

This project is GPL v2 software. See the LICENSE.txt file in this directory for complete text.

About

Add an administration interface for hidden flood control variables in Backdrop.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages