Fri, 10 Apr 2026 15:00:39 +0000 https://bugs.horde.org/ticket/3474 block login for a given time span after x failed logins Hi, the attached patch adds support for blocking the login after a given number of failed logins. That's very usefull to make brute force attacks more difficult when your horde is available to the internet. Ciao, Tobias Tue, 14 Feb 2006 10:33:34 +0000 https://bugs.horde.org/ticket/3474#t16731 Since this is a Kolab only feature (for now), please don't create a new AUTH_REASON, but use AUTH_REASON_MESSAGE instead. Also, there are a few coding standards missing: if-clauses alway go with curly braces; parentheses don't have padding spaces inside. And maye you could use the History class instead, that might reduce the code. Tue, 14 Feb 2006 15:41:34 +0000 https://bugs.horde.org/ticket/3474#t16739 Hi, thanks for the comments, attached is the new version of this patch. Ciao, Tobias Thu, 16 Feb 2006 12:35:01 +0000 https://bugs.horde.org/ticket/3474#t16854 A few more comments: - The patch to conf.xml is missing - You assign $history_data, but never use it - You loop through $history_log->getData() but overwrite $history_list each time inside the loop - You could use getByTimestamp() to get the number of failed logins during the configured time span in one go - You never delete the history entries (when you have successful logins), which will fill up the history table with every failed login Thu, 16 Feb 2006 13:27:18 +0000 https://bugs.horde.org/ticket/3474#t16857 Hi, here is the third revision ;) > A few more comments: > - The patch to conf.xml is missing fixed > - You assign $history_data, but never use it fixed > - You loop through $history_log->getData() but overwrite > $history_list each time inside the loop using array_shift now > - You could use getByTimestamp() to get the number of failed logins > during the configured time span in one go To complicated, left the code as it is > - You never delete the history entries (when you have successful > logins), which will fill up the history table with every failed login Only the relevant timestamps are copied into $new_login_history, so the history will always be around 5 entries, not more. Ciao, Tobias Tue, 21 Feb 2006 11:02:58 +0000 https://bugs.horde.org/ticket/3474#t16981 > Hi, Hi again, sorry for the noise but i noticed a bug in my previous patch. No it checks for an empty history as well. Tue, 21 Feb 2006 12:11:54 +0000 https://bugs.horde.org/ticket/3474#t16984 Committed, thanks. Wed, 22 Feb 2006 18:35:06 +0000 https://bugs.horde.org/ticket/3474#t17033