* Login page: use HTTP status code 401 for a failed login, so tools like fail2ban can recognice that

This commit is contained in:
Ralf Becker 2020-07-04 08:18:10 +02:00
parent 4c7709d49f
commit 98a6a7a9b8

View File

@ -175,6 +175,11 @@ else
}
}
// use HTTP status code 401 for a failed login, so tools like fail2ban can recognice that for login page too
if ($_GET['cd'] == Api\Session::CD_BAD_LOGIN_OR_PASSWORD)
{
http_response_code(401);
}
if (isset($passwd_type) || $submit)
{