Manual:$wgPasswordAttemptThrottle/pt-br

Category:MediaWiki configuration settings/pt-br#PasswordAttemptThrottleCategory:MediaWiki configuration settings introduced in version 1.14.0/pt-br#PasswordAttemptThrottleCategory:MediaWiki configuration settings still in use/pt-br#PasswordAttemptThrottleCategory:Permission variables/pt-br#PasswordAttemptThrottle
User rights, access control and monitoring: $wgPasswordAttemptThrottle
Limit password attempts per IP per address.
Introduzida na versão:1.14.0 (r38886)(git #6fcfa981)
Removida na versão:Ainda em uso
Valores permitidos:(array)
Valor padrão:see below

Details

Limit password attempts to count attempts per seconds per IP per username.

$wgMainCacheType must be set to something other than CACHE_NONE for this setting to work.

When the throttle is hit, the AuthenticationAttemptThrottled hook gets called.

To disable, put the following in LocalSettings.php:

$wgPasswordAttemptThrottle = [];
Versão do MediaWiki:
1.27

Multiple thresholds can be added. They will all be tested separately.


Default value

Versão do MediaWiki:
1.27
$wgPasswordAttemptThrottle = [
	// Short term limit.
	[ 'count' => 5, 'seconds' => 300 ],
	// Long term limit.
	// We need to balance the risk of somebody using this as a DoS attack to lock someone out of their account, and someone doing a brute force attack.
	[ 'count' => 150, 'seconds' => 60 * 60 * 48 ],
];
Versões do MediaWiki:
1.14 1.26
/**
 * Limit password attempts to X attempts per Y seconds per IP per account.
 *
 * @warning Requires memcached.
 */
$wgPasswordAttemptThrottle = array( 'count' => 5, 'seconds' => 300 );

Ver também

Category:Throttling/pt-br
Category:MediaWiki configuration settings/pt-br Category:MediaWiki configuration settings introduced in version 1.14.0/pt-br Category:MediaWiki configuration settings still in use/pt-br Category:Permission variables/pt-br Category:Throttling/pt-br