twotalesanimation def849ac11 Fix: Use SQL DATE_SUB for accurate datetime comparison in rate limiting ...

Changed countRecentFailedAttempts() to use MySQL DATE_SUB(NOW(), INTERVAL ? MINUTE)
instead of PHP-calculated cutoff time. This ensures consistent datetime comparison
on the database server without timezone mismatches between PHP and MySQL.

This fixes the issue where the AND attempted_at condition was filtering out all
recent attempts due to timestamp comparison inconsistencies.

2025-12-03 15:43:39 +02:00

80 KiB

Raw Blame History

View Raw