Currently failed verification attempts via magic code use the user.flood config for the flood event expiry windows.

It would be desirable to use explicit expiry windows for magic code flood events.

Extend the configuration form of the flood_control contrib module to allow easy configuration of flood config of this module.

Comments

chfoidl created an issue. See original summary.

chfoidl’s picture

Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

anybody’s picture

@chfoidl if you're using the core flood services, shouldn't this better live in flood_control module?
#3441460: Add an expiration (setting) for blocked IPs and usernames

You might suggest using flood_control in combination with this module to have all the advanced options and unblocking UI?

chfoidl’s picture

@anybody The flood_control contrib module provides just the UI portion for the Drupal Core flood module's functionality.

Configuration of attempt count and expiry window is already part of Drupal Core, but there is no native UI for configuring those parameters.

The flood_control contrib module does not need change anything to support any other module using the flood system. The unblock form supports any event registered via the core flood service, so it naturally works with the magic_code module as well.

Right now there is no UI to configure the attempt count and expiry window specific to the magic_code module. If you want to configure it right now, you have to set those parameters in settings.php, but it would definetly make sense to expand on the flood_control configuration form to allow configuration of this module's flood settings.

chfoidl’s picture

Issue summary: View changes
Status: Closed (fixed) » Needs work
anybody’s picture

Thank you very very much for your feedback @chfoidl!

Yes I agree. And I think both modules would benefit from that. Nice project btw. I just came across this issue and wanted to let you know :)