https://bugzilla.wikimedia.org/show_bug.cgi?id=57973

       Web browser: ---
            Bug ID: 57973
           Summary: wgPasswordAttemptThrottle doesn't expire with xcache
           Product: MediaWiki
           Version: 1.19.9
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: Unprioritized
         Component: User login and signup
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]
    Classification: Unclassified
   Mobile Platform: ---

$wgPasswordAttemptThrottle doesn't expire when using xcache.
I tested with versions 1.19.8, 1.19.9, 1.20.8, 1.21.3 and git 1.23alpha
(c232652) 2013/12/04

includes/specials/SpecialUserlogin.php
function incLoginThrottle()

$wgMemc->incr( $throttleKey );
// incr() replaces expire ttl with 0, so it never expire.

// it can be fixed replacing incr() with
$wgMemc->set( $throttleKey, $throttleCount+1, $period );

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to