ukamnya/roundcube-defense
1
0 Fork 0
Code Issues Pull Requests Releases Wiki Activity

Compare commits

base: ukamnya/roundcube-defense:defense-0.1
ukamnya/roundcube-defense:master ukamnya/roundcube-defense:develop
ukamnya/roundcube-defense:defense-0.1
...
compare: ukamnya/roundcube-defense:develop
ukamnya/roundcube-defense:master ukamnya/roundcube-defense:develop
ukamnya/roundcube-defense:defense-0.1
8 Commits
defense-0.1 ... develop
Author SHA1 Message Date
Steve Allison 49812d9746 Fix missing () 2013-02-22 19:05:54 +00:00
Steve Allison 9af9edf09d No need for DB lookup during login unless 403 2013-02-22 19:02:27 +00:00
Steve Allison 7e66141336 Match comment to function 2013-02-21 21:25:56 +00:00
Steve Allison e0bc336890 Reformat config file a little 2013-02-21 21:25:11 +00:00
Steve Allison 2f90243356 Fix debug output for check period 2013-02-21 19:19:51 +00:00
Steve Allison 964c53427d Update README with roundcube version requirement 2013-02-21 19:15:26 +00:00
Steve Allison d6a5e8a800 Add image to readme 2013-02-21 19:11:51 +00:00
Steve Allison 746f590746 Update readme, TODO log ui 2013-02-21 19:07:05 +00:00
3 changed files with 10 additions and 6 deletions
Expand all files Collapse all files

No files matched your search

README.md
+5 -1
View File
@@ -5,6 +5,8 @@ Protects the Roundcube login page from bruteforce login attempts.
Original concept from the roundcube "security" plugin by Lazlo Westerhof. Original concept from the roundcube "security" plugin by Lazlo Westerhof.
Wanting to fix the shortfalls of that plugin led me to a rewrite. Wanting to fix the shortfalls of that plugin led me to a rewrite.
Requires Roundcube 0.9-beta or higher.
FEATURES FEATURES
------------------- -------------------
- Bruteforce protection - Bruteforce protection
@@ -13,9 +15,11 @@ FEATURES
- Increasing ban duration by power of 4 for repeated offenders (2m, 8m, 32m, 8h32m, etc) - Increasing ban duration by power of 4 for repeated offenders (2m, 8m, 32m, 8h32m, etc)
- Whitelist - Whitelist
- Blacklist - Blacklist
- Failed logins log - Failed logins log [TODO: Logs are in DB, but no interface yet]
- Only accessible by administrator - Only accessible by administrator
![Example](http://i.imgur.com/caJQC3I.png)
INSTALLATION INSTALLATION
-------------------- --------------------
1. Change to plugins/ directory 1. Change to plugins/ directory
config.inc.php.dist
+1 -1
View File
@@ -52,8 +52,8 @@
// Reset repeat offender count after this number of seconds or // Reset repeat offender count after this number of seconds or
// multiply last ban period by <defense_repeat_multiplier>, whichever is greater // multiply last ban period by <defense_repeat_multiplier>, whichever is greater
$rcmail_config['defense_repeat_reset'] = 86400; $rcmail_config['defense_repeat_reset'] = 86400;
// Name of table in database // Name of table in database
$rcmail_config['defense_db_table'] = 'defense'; $rcmail_config['defense_db_table'] = 'defense';
defense.php
+4 -4
View File
@@ -131,7 +131,7 @@ class defense extends rcube_plugin {
return (((!preg_match('/^[\.\/:0-9a-f]+$/', strtolower($ip))) || (substr_count($ip, ':') < 2)) ? true : false); return (((!preg_match('/^[\.\/:0-9a-f]+$/', strtolower($ip))) || (substr_count($ip, ':') < 2)) ? true : false);
} }
/** /**
* Check string if it is IPv6 * Check string if it is IPv4
* *
* @param string * @param string
* ip address * ip address
@@ -290,9 +290,9 @@ class defense extends rcube_plugin {
die(); die();
} }
if ($this->isBanned($this->ipaddr)) { if (($this->ban_httpstatus) && ($this->isBanned($this->ipaddr))) {
if ($this->ban_httpstatus) { $this->sendForbiddenHeader(); }
$this->debug("IP already banned"); $this->debug("IP already banned");
$this->sendForbiddenHeader();
} }
$this->debug("Sending login form."); $this->debug("Sending login form.");
@@ -347,7 +347,7 @@ class defense extends rcube_plugin {
$this->debug($query . " [" . $result->rowCount() . "]"); $this->debug($query . " [" . $result->rowCount() . "]");
$row = $result->fetch(); $row = $result->fetch();
if (!$row) { $this->debug("Warning, SQL result empty: $query"); return false; } // No rows? Strange, abort. if (!$row) { $this->debug("Warning, SQL result empty: $query"); return false; } // No rows? Strange, abort.
$this->debug("Found " . $row['n'] . " failed attempts in last " . $this->fail_reset . "s"); $this->debug("Found " . $row['n'] . " failed attempts in last " . (time() - $rTime) . "s");
if (($row['n'] >= $this->fail_max)) { if (($row['n'] >= $this->fail_max)) {
$this->debug("IP banned."); $this->debug("IP banned.");
// This IP is now banned // This IP is now banned