Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
While more of an annoyance than a security issue, I have had some users spam password reset requests to everyone they can find. The module should track password reset attempts and be included in the blocks.
Comments
Comment #1
ilo CreditAttribution: ilo commentedThis requires a different tracking table, however I agree with you, this can be addressed with the new feature list. Postponed for now, don't want to forget it.
Comment #2
deekayen CreditAttribution: deekayen commentedbumping version
Comment #3
rooby CreditAttribution: rooby commentedRelated issue for drupal core #1681832: Password reset form has no flood protection
Seems like that eventually might get into drupal 7 core.