aboutsummaryrefslogtreecommitdiffstats
path: root/src/app/RateLimiter.php
Commit message (Collapse)AuthorAgeFilesLines
* Add rate limiting on login and password reset endpointsThomas Vanbesien2026-03-221-0/+60
Track attempts per IP in a rate_limits table with a sliding time window. Login allows 5 failed attempts per 15 min, password reset allows 3 requests per 15 min. Old entries are purged automatically.