server/settings/Controller
Lukas Reschke 805419bb95
Add bruteforce protection to changePersonalPassword
While the risk is actually quite low because one would already have the user session and could potentially do other havoc it makes sense to throttle here in case of invalid previous password attempts.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-04-18 17:55:51 +02:00
..
AdminSettingsController.php Allow apps to specify an icon with the sections via the API 2017-01-19 10:42:21 +01:00
AppSettingsController.php Check for app updates on disabled page 2016-12-09 22:30:54 +01:00
AuthSettingsController.php Merge pull request #1447 from nextcloud/password-confirmation-for-some-actions 2016-11-18 15:42:30 +01:00
CertificateController.php Merge pull request #892 from nextcloud/fix_phpdoc 2016-08-17 10:38:21 +02:00
ChangePasswordController.php Add bruteforce protection to changePersonalPassword 2017-04-18 17:55:51 +02:00
CheckSetupController.php Add warning on admin screen when set_time_limit is unavailable 2017-03-16 11:48:28 +01:00
EncryptionController.php Check that set_time_limit is not disabled before calling it 2017-03-11 17:04:21 +01:00
GroupsController.php Require password confirmation for user management 2016-11-18 12:10:50 +01:00
LogSettingsController.php remove old logging section 2016-11-21 13:46:31 +01:00
MailSettingsController.php Fail when the test mail could not be sent 2017-03-17 13:45:25 +01:00
PersonalController.php Allow non-subadmins to change their language 2016-12-08 16:24:21 +01:00
SecuritySettingsController.php Set default 2016-09-07 22:09:32 +02:00
UsersController.php Add support for theming 2017-04-07 12:03:47 -05:00