discourse/app/controllers
Sam Saffron d8d54a92f1
FEATURE: tighten rate limiting rules for forgot password
1. Total 6 attempts per day per user
2. Total of 5 per unique email/login that is not found per hour
3. If an admin blocks an IP that IP can not request a reset
2020-05-08 13:30:51 +10:00
..
2019-12-24 15:56:44 +05:30
2019-10-21 12:08:20 +01:00
2019-10-21 12:08:20 +01:00