https://bugzilla.wikimedia.org/show_bug.cgi?id=9838


Platonides <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]




--- Comment #4 from Platonides <[email protected]>  2009-02-13 12:46:08 UTC 
---
Instead of a session variable, it should use memcached, as the password
throttle.
With that implementation, asking for the password 9 times, produces 3 emails
saying that there were 'three or more attempts'. It should try to provide the
exact number.
In fact, the email should be delayed until after X time without login attempts
or the ip is throttled.

Also it has to be considered that it is a way of spamming.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to