getgrav / grav-plugin-login

Grav Login Plugin
http://getgrav.org
MIT License
44 stars 54 forks source link

enable bruteforce protection by default #195

Closed Rotzbua closed 5 years ago

Rotzbua commented 5 years ago

There were different values in the code, now values equal.

According to security by default bruteforce protection should be enabled by default.

max_pw_resets_count should be set, otherwise it can be used to spam victims mail address with reset mails.