Security Settings

hasRight($user_id, 'superuser') || $userObject->hasRight($user_id, 'edit whitelist'))) { ?>

IP Whitelist

IP addresses and networks that will always bypass the ratelimiting login checks.
IP Address Network Description Added By Added On Actions
hasRight($user_id, 'superuser') || $userObject->hasRight($user_id, 'edit blacklist'))) { ?>

IP Blacklist

IP addresses and networks that will always get blocked at login.
IP Address Network Reason Added By Added On Expires Actions
hasRight($user_id, 'superuser') || $userObject->hasRight($user_id, 'edit ratelimiting'))) { ?>

Rate Limiting Settings

Rate limiting settings control how many failed login attempts are allowed before blocking an IP address.

Current Settings

  • Maximum login attempts: maxAttempts ?>
  • Time window: decayMinutes ?> minutes
  • Auto-blacklist threshold: autoBlacklistThreshold ?> attempts
  • Auto-blacklist duration: autoBlacklistDuration ?> hours

Note: These settings can be modified in the RateLimiter class configuration.

Recent Failed Login Attempts

db->prepare(" SELECT ip_address, username, attempted_at FROM {$rateLimiter->ratelimitTable} ORDER BY attempted_at DESC LIMIT 10 "); $stmt->execute(); $attempts = $stmt->fetchAll(PDO::FETCH_ASSOC); foreach ($attempts as $attempt) { ?>
IP Address Username Attempted At