indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Extra debug for failed login attempts

merge-requests/30/head
Bob Mottram 2024-04-18 21:10:37 +01:00
parent 36c3070245
commit 295983eea3
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
daemon_post_login.py
View File

@ -85,7 +85,8 @@ def post_login_screen(self, calling_domain: str, cookie: str,
login_nickname, login_password, register = \ login_nickname, login_password, register = \
html_get_login_credentials(login_params, html_get_login_credentials(login_params,
self.server.last_login_time, self.server.last_login_time,
registrations_open) registrations_open,
calling_domain, ua_str)
if login_nickname and login_password: if login_nickname and login_password:
if is_system_account(login_nickname): if is_system_account(login_nickname):
print('Invalid username login: ' + login_nickname + print('Invalid username login: ' + login_nickname +

10
webapp_login.py
View File

@ -25,17 +25,21 @@ from theme import get_text_mode_logo
def html_get_login_credentials(login_params: str, def html_get_login_credentials(login_params: str,
last_login_time: int, last_login_time: int,
registrations_open: bool) -> (str, str, bool): registrations_open: bool,
calling_domain: str,
ua_str: str) -> (str, str, bool):
"""Receives login credentials via HTTPServer POST """Receives login credentials via HTTPServer POST
""" """
if not login_params.startswith('username='): if not login_params.startswith('username='):
if '&username=' not in login_params: if '&username=' not in login_params:
print('WARN: invalid login parameters ' + login_params) print('WARN: invalid login parameters ' + calling_domain + ', ' +
ua_str + ', ' + login_params)
return None, None, None return None, None, None
# minimum time between login attempts # minimum time between login attempts
curr_time = int(time.time()) curr_time = int(time.time())
if curr_time < last_login_time + 10: if curr_time < last_login_time + 10:
print('WARN: login attempt too frequent') print('WARN: login attempt too frequent ' + calling_domain + ', ' +
ua_str)
return None, None, None return None, None, None
if '&' not in login_params: if '&' not in login_params:
return None, None, None return None, None, None