CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

Fixed #5 -- Added a spam protection feature to password resets

Browse Source
This commit is contained in:
Raphael Michel
2016-02-22 22:10:25 +01:00
parent e29f19e96b
commit d5feeb77d1
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/pretix/control/views/auth.py
View File

@@ -82,6 +82,17 @@ class Forgot(TemplateView):
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
if self.form.is_valid(): if self.form.is_valid():
user = self.form.cleaned_data['user'] user = self.form.cleaned_data['user']
if settings.HAS_REDIS:
from django_redis import get_redis_connection
rc = get_redis_connection("redis")
if rc.exists('pretix_pwreset_%s' % (user.id)):
user.log_action('pretix.control.auth.user.forgot_password.denied.repeated')
messages.error(request, _('We already sent you an email in the last 24 hours.'))
return redirect('control:auth.forgot')
else:
rc.setex('pretix_pwreset_%s' % (user.id), 3600 * 24, '1')
mail( mail(
user.email, _('Password recovery'), 'pretixcontrol/email/forgot.txt', user.email, _('Password recovery'), 'pretixcontrol/email/forgot.txt',
{ {