After failed login wait a second to slow down brute-force attacks (#1490549)

9 years ago · c1bbf0d0b6
parent fddfd8e6d7
commit c1bbf0d0b6
1 changed files with 2 additions and 0 deletions
--- a/program/include/rcmail.php
+++ b/program/include/rcmail.php
@ -596,6 +596,8 @@ class rcmail extends rcube

        // try to log in
        if (!$storage->connect($host, $username, $pass, $port, $ssl)) {
+            // Wait a second to slow down brute-force attacks (#1490549)
+            sleep(1);
            return false;
        }