From a15d877ba8e12ba6659aad69d63b8b73256144ad Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Wed, 11 Nov 2015 12:53:43 -0500
Subject: [PATCH] Added brute-force attack prevention via login rate limit (#1490566)
---
SQL/postgres.initial.sql | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
diff --git a/SQL/postgres.initial.sql b/SQL/postgres.initial.sql
index ba53112..2fc85c3 100644
--- a/SQL/postgres.initial.sql
+++ b/SQL/postgres.initial.sql
@@ -22,6 +22,8 @@
mail_host varchar(128) DEFAULT '' NOT NULL,
created timestamp with time zone DEFAULT now() NOT NULL,
last_login timestamp with time zone DEFAULT NULL,
+ failed_login timestamp with time zone DEFAULT NULL,
+ failed_login_counter integer DEFAULT NULL,
"language" varchar(5),
preferences text DEFAULT ''::text NOT NULL,
CONSTRAINT users_username_key UNIQUE (username, mail_host)
@@ -290,4 +292,4 @@
value text
);
-INSERT INTO system (name, value) VALUES ('roundcube-version', '2015030800');
+INSERT INTO system (name, value) VALUES ('roundcube-version', '2015111100');
--
Gitblit v1.9.1