tim-vdv/yii2-login-attempts-behavior

Disable login after multiple failures.

Yii2 Login Attempts Behavior

Store login failures, and disable after multiple failures., _(*1)

Installation

The preferred way to install this extension is through composer., _(*2)

Either run, _(*3)

composer require tim-vdv/yii2-login-attempts-behavior

or add, _(*4)

"tim-vdv/yii2-login-attempts-behavior": "*"

to the require section of your composer.json file., _(*5)

Usage

Run the following migration, _(*6)

php yii migrate --migrationPath="vendor/timvdv/yii2-login-attempts-behavior/src/migrations"  --interactive=0

Add the behavior to your login model., _(*7)

public function behaviors()
{
    $behaviors = parent::behaviors();

    $behaviors[] = [
        'class' => '\timvdv\loginattempts\LoginAttemptBehavior',

        // Amount of attempts in the given time period
        'attempts' => 3,

        // the duration, for a regular failure to be stored for
        // resets on new failure
        'duration' => 300,

        // the unit to use for the duration
        'durationUnit' = 'second',

        // the duration, to disable login after exceeding `attemps`
        'disableDuration' => 900,

        // the unit to use for the disable duration
        'disableDurationUnit' => 'second',

        // the attribute used as the key in the database
        // and add errors to
        'usernameAttribute' => 'email',

        // the attribute to check for errors
        'passwordAttribute' => 'password',

        // the validation message to return to `usernameAttribute`
        'message' => 'Login disabled',
    ];

    return $behaviors;
}

Todo

• [ ] Add cache storage
• [ ] Add better DB support
• [ ] Add option for IP (other?) instead of key
• [ ] Add failure delay option
• [ ] More customisable