Tomasz Sowa
c9bf20201b
added: possibility to ban if a client tries to hijack the session cookie
added: possibility to ban if a client did not send a session cookie
renamed: ezc functions:
login_cannot_login -> ipban_is_login_allowed_from_this_ip (and the return value was changed)
login_when_available_login -> ipban_current_ip_expires_time
added: config options:
// after how many broken encoded cookie we should ban the current IP
// default: 2 (value in the range <0 - 65535>)
size_t broken_encoded_cookie_treshold;
// after how many incorrect session identifiers (or session indices) we should ban the current IP
// do not set this value too low, as people connecting from the same IP address (from behind a NAT)
// would be banned if they have an old session cookie remembered in the browser
// default: 128 (value in the range <0 - 65535>)
size_t session_hijacking_treshold;
// after how many times a client will be banned if it did not send a session cookie
// default: 1000 (value in the range <0 - 65535>)
size_t no_session_cookie_treshold;
git-svn-id: svn://ttmath.org/publicrep/winix/trunk@995 e52654a7-88a9-db11-a3e9-0013d4bc506e
52 lines
1.2 KiB
HTML
52 lines
1.2 KiB
HTML
<div class="winix">
|
|
|
|
<h1>{login_header}</h1>
|
|
|
|
[if-one user_logged]
|
|
<p>{logged_as_long}: [user_name]<br>
|
|
<a href="[doc_base_url][if-one dir_can_read_exec][dir][if-any item_is item_can_read][item_url]/[end][else]/[end]logout">{logout}</a></p>
|
|
[else]
|
|
|
|
[if-no ipban_is_login_allowed_from_this_ip]
|
|
<p>{login_cannot_login_from_this_ip}<br>
|
|
{login_cannot_login_available} [ipban_current_ip_expires_time]</p>
|
|
[else]
|
|
|
|
<form method="post" action="[login_path]login">
|
|
|
|
<div class="winix_input_b">
|
|
<input type="text" name="login">
|
|
</div>
|
|
|
|
<div class="winix_input_b">
|
|
<input type="password" name="password">
|
|
</div>
|
|
|
|
<div class="winix_input_b">
|
|
<input id="winix_login_rememberme_id" type="checkbox" name="rememberme">
|
|
<label for="winix_login_rememberme_id">{remember_me}</label>
|
|
</div>
|
|
|
|
[if login_should_use_captcha]
|
|
<div class="winix_input_a">
|
|
<label for="winix_rebus_id">{rebus_how_is_it} [rebus_question]?</label>
|
|
<input id="winix_rebus_id" type="text" name="rebus">
|
|
</div>
|
|
[end]
|
|
|
|
<input type="submit" value="{button_login}">
|
|
|
|
[if winix_function_param_is "postredirect"]
|
|
<input type="hidden" name="postredirect" value="[winix_function_param_value "postredirect"]">
|
|
[end]
|
|
|
|
|
|
</form>
|
|
|
|
[end]
|
|
|
|
[end]
|
|
|
|
|
|
</div>
|