Add throttle for password reset form

snipe · snipe · commit c3a6874b1619 · 2022-12-06T20:42:40.000-08:00
Signed-off-by: snipe &lt;snipe@snipe.net&gt;
diff --git a/app/Http/Controllers/Auth/ResetPasswordController.php b/app/Http/Controllers/Auth/ResetPasswordController.php
@@ -41,6 +41,7 @@ class ResetPasswordController extends Controller
     public function __construct()
     {
         $this->middleware('guest');
+        $this->middleware('throttle:10,1');
     }
 
     protected function rules()
@@ -116,7 +117,7 @@ public function reset(Request $request)
             }
 
             \Log::debug('Password reset for '.$user->username.' FAILED - this user exists but the token is not valid');
-            return redirect()->back()->withInput($request->only('email'))->with('error', trans('passwords.token'));
+            return redirect()->back()->withInput($request->only('email'))->with('success', trans('passwords.reset'));
 
         }
 

Original file line number	Diff line number	Diff line change
`@@ -41,6 +41,7 @@ class ResetPasswordController extends Controller`
`41`	`41`	`public function __construct()`
`42`	`42`	`{`
`43`	`43`	`$this->middleware('guest');`
	`44`	`+ $this->middleware('throttle:10,1');`
`44`	`45`	`}`
`45`	`46`
`46`	`47`	`protected function rules()`
`@@ -116,7 +117,7 @@ public function reset(Request $request)`
`116`	`117`	`}`
`117`	`118`
`118`	`119`	`\Log::debug('Password reset for '.$user->username.' FAILED - this user exists but the token is not valid');`
`119`		`- return redirect()->back()->withInput($request->only('email'))->with('error', trans('passwords.token'));`
	`120`	`+ return redirect()->back()->withInput($request->only('email'))->with('success', trans('passwords.reset'));`
`120`	`121`
`121`	`122`	`}`
`122`	`123`