https://bugzilla.wikimedia.org/show_bug.cgi?id=17487
Mike.lifeguard <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Site requests |General/Unknown Product|Wikimedia |MediaWiki Summary|Change rate limit for |Allow a rate limit for |mailpassword for IPs |mailpassword on the user for | |which the request is being | |made --- Comment #16 from Mike.lifeguard <[email protected]> 2009-02-18 22:12:47 UTC --- (In reply to comment #15) > I believe the rate is intentionally as 'high' as it is because there were > legitimate uses of the password reset feature being hit so many times per IP > in > an hour (e.g., shared IPs). > > I think the correct answer here is to complement the current system with a > number of hits per requestee per day, a limit which could be pretty low and > not > harm anything, in my opinion. > Ahh, of course. I'll revert my changes to the summary etc then. The limit should indeed be on the user for which the password is being requested, not on the IP. I suppose I conflated the two. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
