Limit throttler to 48 hours

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2020-10-08 15:04:38 +07:00 · 2020-10-08 15:04:38 +07:00 · 8fae2beece
parent 6c1b542def
commit 8fae2beece
1 changed files with 5 additions and 0 deletions
--- a/lib/private/Security/Bruteforce/Throttler.php
+++ b/lib/private/Security/Bruteforce/Throttler.php
@ -226,6 +226,11 @@ class Throttler {
 	 * @return int
 	 */
 	public function getAttempts(string $ip, string $action = '', float $maxAgeHours = 12): int {
+		if ($maxAgeHours > 48) {
+			$this->logger->error('Bruteforce has to use less than 48 hours');
+			$maxAgeHours = 48;
+		}
+
 		if ($ip === '') {
 			return 0;
 		}