cash wrote on 41978876-03-13

Is this for actions or a general throttle? The failed logins is not throttled based on any action.

trac user webgalli wrote on 41997847-09-04

Cash :The failed action throttle is already in use for login failures. The same function can be used as a generic action throttle or a failed action. We can use it for password reset requests (10 requests /24 hours as in the Giant sites like Fb, twitter etc), can save some server resource in case of a spambot hit.

Also we can use it for other actions like say a user can only send 10 invitations /day to his friends Or 10 private messages in 5 minutes, can post only 10 comments in 5 minutes etc. All we need is a proper working cron too.

Instead of duplicating the same function again, we can reuse it and keep the core light.

cash wrote on 42001348-08-01

No, the failed login throttle is not for actions. You can log in as many times as you want. It counts failed logins not the number of times you have logged in.

Title changed from A generic action throtller needed to A generic action throttler needed by cash on 42001348-08-01

Milestone changed to Long Term Discussion by ewinslow on 42363889-06-05

Do we really need to do anything here? As long as we have some kind of generic plugin hook when submitting forms, I think this should be done in a plugin... We already have the 'action,*' hook, so that should be though for now I would think...