lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add info on mitigation

Browse Source
This commit is contained in:
Laurent Destailleur 2022-09-11 20:48:23 +02:00
parent 3ac9304055
commit 4a17fae9af
2 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
htdocs/admin/system/security.php
View File

@ -563,6 +563,21 @@ print '<br>';
print '<br>'; print '<br>';
print load_fiche_titre($langs->trans("LimitsAndMitigation"), '', 'folder');
print '<span class="opacitymedium">';
print 'For a higher security, we also recommend to implement limits and mitigation on number of endpoints per minutes for the following URL'."<br>";
print '</span>';
print '<br>';
print 'Login process -> This can be done using a fail2ban rule (see example into dev/setup)'."<br>";
print DOL_URL_ROOT.'/passwordforgotten.php (see example into dev/setup)'."<br>";
print DOL_URL_ROOT.'/public/* (see example into dev/setup)'."<br>";
// End of page // End of page
llxFooter(); llxFooter();
$db->close(); $db->close();

2
htdocs/core/tpl/login.tpl.php
View File

@ -137,9 +137,11 @@ $(document).ready(function () {
<div class="login_vertical_align"> <div class="login_vertical_align">
<form id="login" name="login" method="post" action="<?php echo $php_self; ?>"> <form id="login" name="login" method="post" action="<?php echo $php_self; ?>">
<input type="hidden" name="token" value="<?php echo newToken(); ?>" /> <input type="hidden" name="token" value="<?php echo newToken(); ?>" />
<input type="hidden" name="actionlogin" value="login"> <input type="hidden" name="actionlogin" value="login">
<input type="hidden" name="loginfunction" value="loginfunction" /> <input type="hidden" name="loginfunction" value="loginfunction" />
<input type="hidden" name="backtopage" value="<?php echo GETPOST('backtopage'); ?>" />
<!-- Add fields to store and send local user information. This fields are filled by the core/js/dst.js --> <!-- Add fields to store and send local user information. This fields are filled by the core/js/dst.js -->
<input type="hidden" name="tz" id="tz" value="" /> <input type="hidden" name="tz" id="tz" value="" />
<input type="hidden" name="tz_string" id="tz_string" value="" /> <input type="hidden" name="tz_string" id="tz_string" value="" />