From a15d877ba8e12ba6659aad69d63b8b73256144ad Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Wed, 11 Nov 2015 12:53:43 -0500 Subject: [PATCH] Added brute-force attack prevention via login rate limit (#1490566) --- SQL/mysql.initial.sql | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/SQL/mysql.initial.sql b/SQL/mysql.initial.sql index 721c839..df1d015 100644 --- a/SQL/mysql.initial.sql +++ b/SQL/mysql.initial.sql @@ -24,6 +24,8 @@ `mail_host` varchar(128) NOT NULL, `created` datetime NOT NULL DEFAULT '1000-01-01 00:00:00', `last_login` datetime DEFAULT NULL, + `failed_login` datetime DEFAULT NULL, + `failed_login_counter` int(10) UNSIGNED DEFAULT NULL, `language` varchar(5), `preferences` longtext, PRIMARY KEY(`user_id`), @@ -209,4 +211,4 @@ /*!40014 SET FOREIGN_KEY_CHECKS=1 */; -INSERT INTO system (name, value) VALUES ('roundcube-version', '2015030800'); +INSERT INTO system (name, value) VALUES ('roundcube-version', '2015111100'); -- Gitblit v1.9.1