mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-30 21:40:43 +02:00
implemented maximum login attempts feature to prevent dictionary attacks
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@5392 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
@@ -153,18 +153,15 @@ if (@extension_loaded('zlib'))
|
||||
}
|
||||
else
|
||||
{
|
||||
if (!empty($HTTP_GET_VARS['c']))
|
||||
{
|
||||
$_png = define_raw_pngs();
|
||||
$_png = define_raw_pngs();
|
||||
|
||||
$char = substr($code, intval($HTTP_GET_VARS['c']) - 1, 1);
|
||||
header('Content-Type: image/png');
|
||||
header('Cache-control: no-cache, no-store');
|
||||
echo base64_decode($_png[$char]);
|
||||
$char = substr($code, -1);
|
||||
header('Content-Type: image/png');
|
||||
header('Cache-control: no-cache, no-store');
|
||||
echo base64_decode($_png[$char]);
|
||||
|
||||
unset($_png);
|
||||
exit;
|
||||
}
|
||||
unset($_png);
|
||||
exit;
|
||||
}
|
||||
|
||||
exit;
|
||||
|
@@ -296,6 +296,12 @@ if ( isset($HTTP_POST_VARS['submit']) )
|
||||
|
||||
if ($row = $db->sql_fetchrow($result))
|
||||
{
|
||||
// Only compare one char if the zlib-extension is not loaded
|
||||
if (!@extension_loaded('zlib'))
|
||||
{
|
||||
$row['code'] = substr($row['code'], -1);
|
||||
}
|
||||
|
||||
if ($row['code'] != $confirm_code)
|
||||
{
|
||||
$error = TRUE;
|
||||
|
Reference in New Issue
Block a user