webinterface.git

@@ -189,6 +189,13 @@ function logger($severity, $scriptname, $scope, $message)

     db_query("INSERT INTO misc.scriptlog (remote, user,scriptname,scope,message) VALUES (:remote, :user, :scriptname, :scope, :message)", $args);

 }

+function count_failed_logins() {

+    $result = db_query("SELECT count(*) AS num FROM misc.scriptlog WHERE user IS NULL AND scriptname='session/start' AND scope='login' AND message LIKE 'wrong user data%' AND remote=:remote AND `timestamp` > NOW() - INTERVAL 10 MINUTE", array(":remote" => $_SERVER['REMOTE_ADDR']));

+    $data = $result->fetch();

+    DEBUG('seen '.$data['num'].' failed logins from this address within 10 minutes');

+    return $data['num'];

+}

+

 function html_header($arg)

 {

     global $html_header;

@@ -135,6 +135,12 @@ function require_role($roles)

 function login_screen($why = null)

 {

+    $failed = count_failed_logins();

+    if ($failed > 5) {

+        global $title;

+        $title = '';

+        system_failure("Zu viele fehlgeschlagenen Login-Versuche! Bitte warten Sie einige Minuten bis zum nächsten Versuch!");

+    }

     if (! $why) {

         if (isset($_COOKIE['CLIENTCERT_AUTOLOGIN']) && $_COOKIE['CLIENTCERT_AUTOLOGIN'] == '1') {

             redirect("/certlogin/index.php?destination=".urlencode($_SERVER['REQUEST_URI']));

@@ -32,6 +32,14 @@ define('ROLE_SUBUSER', 32);

 function find_role($login, $password, $i_am_admin = false)

 {

+    if (!$i_am_admin) {

+        $failed = count_failed_logins();

+        if ($failed > 5) {

+            global $title;

+            $title = '';

+            system_failure("Zu viele fehlgeschlagenen Login-Versuche! Bitte warten Sie einige Minuten bis zum nächsten Versuch!");

+        }

+    }

     // Domain-Admin?  <not implemented>

     // System-User?

     $uid = (int) $login;