Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent password reset brute force #778

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open

Prevent password reset brute force #778

Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
60a9eed
Merge pull request #6 from panique/master
geozak Jan 8, 2016
6fa6e6e
Added messages to support changes in verifyPasswordReset
geozak Jan 8, 2016
4ac1aa5
Added expirePasswordReset and altered verifyPasswordReset
geozak Jan 8, 2016
ca3edb8
Added password reset attempts counter field
geozak Jan 9, 2016
eaaafde
updated demo users insert example
geozak Jan 9, 2016
e81d000
Merge pull request #7 from geozak/master
geozak Jan 9, 2016
6fa779d
Remove DB changes
geozak Jan 16, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Remove DB changes 
Removing DB from this branch so that it is in a completed state.
  • Loading branch information
@geozak
geozak committed Jan 16, 2016
commit 6fa779db05e0155917853c10eec59873cce2f23f
7 changes: 3 additions & 4 deletions application/_installation/02-create-table-users.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,6 @@ CREATE TABLE IF NOT EXISTS `huge`.`users` (
`user_activation_hash` varchar(40) COLLATE utf8_unicode_ci DEFAULT NULL COMMENT 'user''s email verification hash string',
`user_password_reset_hash` char(40) COLLATE utf8_unicode_ci DEFAULT NULL COMMENT 'user''s password reset code',
`user_password_reset_timestamp` bigint(20) DEFAULT NULL COMMENT 'timestamp of the password reset request',
`user_password_reset_attempts` tinyint(1) NOT NULL DEFAULT '0' COMMENT 'user''s failed password reset attempts with current reset code',
`user_provider_type` text COLLATE utf8_unicode_ci,
PRIMARY KEY (`user_id`),
UNIQUE KEY `user_name` (`user_name`),
Expand All @@ -27,6 +26,6 @@ CREATE TABLE IF NOT EXISTS `huge`.`users` (
INSERT INTO `huge`.`users` (`user_id`, `session_id`, `user_name`, `user_password_hash`, `user_email`, `user_active`, `user_deleted`, `user_account_type`,
`user_has_avatar`, `user_remember_me_token`, `user_creation_timestamp`, `user_suspension_timestamp`, `user_last_login_timestamp`,
`user_failed_logins`, `user_last_failed_login`, `user_activation_hash`, `user_password_reset_hash`,
`user_password_reset_timestamp`, `user_password_reset_attempts`, `user_provider_type`) VALUES
(1, NULL, 'demo', '$2y$10$OvprunjvKOOhM1h9bzMPs.vuwGIsOqZbw88rzSyGCTJTcE61g5WXi', '[email protected]', 1, 0, 7, 0, NULL, 1422205178, NULL, 1422209189, 0, NULL, NULL, NULL, NULL, 0, 'DEFAULT'),
(2, NULL, 'demo2', '$2y$10$OvprunjvKOOhM1h9bzMPs.vuwGIsOqZbw88rzSyGCTJTcE61g5WXi', '[email protected]', 1, 0, 1, 0, NULL, 1422205178, NULL, 1422209189, 0, NULL, NULL, NULL, NULL, 0, 'DEFAULT');
`user_password_reset_timestamp`, `user_provider_type`) VALUES
(1, NULL, 'demo', '$2y$10$OvprunjvKOOhM1h9bzMPs.vuwGIsOqZbw88rzSyGCTJTcE61g5WXi', '[email protected]', 1, 0, 7, 0, NULL, 1422205178, NULL, 1422209189, 0, NULL, NULL, NULL, NULL, 'DEFAULT'),
(2, NULL, 'demo2', '$2y$10$OvprunjvKOOhM1h9bzMPs.vuwGIsOqZbw88rzSyGCTJTcE61g5WXi', '[email protected]', 1, 0, 1, 0, NULL, 1422205178, NULL, 1422209189, 0, NULL, NULL, NULL, NULL, 'DEFAULT');