Re: z3c.password and "failedAttempts" andSessionCredentialsPlugin
Jan-Wijbrand Kolman <[email protected]>
| Newsgroups | gmane.comp.web.zope.devel |
|---|---|
| Message-ID | <BDB0FB96-FEDB-4D5D-9258-0986AAEA08CE%[email protected]> |
Hi Adam, Tres Seaver <[email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Adam GROSZER wrote: > >> Thinking this further, resource requests will have a '/@@/' (usually) >> in their URL. So it might be an idea to skip those requests from >> counting. > > Seems to me skipping anything except POST requests would be the right > thing to do: suppose the user reloads the login form for some reason > (maybe their browser crashes, whatever). I see you're working on this issue. That's fantastic. If you need a tester... by all means let me know :-) regards, jw _______________________________________________ Zope-Dev maillist - [email protected] https://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope )