changeset 503:2c2df8545112

Changed the lockout time on logins to 2 minutes.
author Brian Neal <bgneal@gmail.com>
date Sat, 03 Dec 2011 15:07:01 +0000
parents 9d096ceab0c0
children b5bd3509e6e6
files gpp/accounts/views.py gpp/antispam/__init__.py
diffstat 2 files changed, 5 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/gpp/accounts/views.py	Sat Dec 03 03:25:04 2011 +0000
+++ b/gpp/accounts/views.py	Sat Dec 03 15:07:01 2011 +0000
@@ -87,7 +87,8 @@
 
 #######################################################################
 
-@rate_limit(count=10, interval=datetime.timedelta(minutes=1))
+@rate_limit(count=10, interval=datetime.timedelta(minutes=1),
+        lockout=datetime.timedelta(minutes=2))
 def login_ajax(request):
     """
     This view function handles a login via AJAX.
--- a/gpp/antispam/__init__.py	Sat Dec 03 03:25:04 2011 +0000
+++ b/gpp/antispam/__init__.py	Sat Dec 03 15:07:01 2011 +0000
@@ -1,3 +1,5 @@
+import datetime
+
 from django.contrib.auth import views as auth_views
 
 from antispam.decorators import rate_limit
@@ -8,4 +10,4 @@
         "then we apologize; your account will be restored shortly.")
 
 # Install rate limiting on auth login
-auth_views.login = rate_limit()(auth_views.login)
+auth_views.login = rate_limit(lockout=datetime.timedelta(minutes=2))(auth_views.login)