After failed login wait a second to slow down brute-force attacks (#1490549)

9 years ago · 70942083ce
parent 280395a544
commit 70942083ce
1 changed files with 2 additions and 0 deletions
--- a/program/include/rcmail.php
+++ b/program/include/rcmail.php
@ -592,6 +592,8 @@ class rcmail extends rcube

        // try to log in
        if (!$storage->connect($host, $username, $pass, $port, $ssl)) {
+            // Wait a second to slow down brute-force attacks (#1490549)
+            sleep(1);
            return false;
        }