Update: 2026-05-03 20:51:50

2026-05-03 20:51:50 +03:00
parent b0e79fd214
commit 8af74f0621
3 changed files with 37 additions and 6 deletions
--- a/app/modules_app/auth/login.php
+++ b/app/modules_app/auth/login.php
@@ -7,7 +7,13 @@ use App\Core\Database;
 use App\Core\JWT;
 use App\Core\Validator;

-$data = input();
+use App\Middleware\RateLimitMiddleware;
+use App\Core\Security;
+
+// 0. Rate Limiting (5 attempts per minute per IP)
+RateLimitMiddleware::check(5, 60);
+
+$data = Security::sanitize(input());

 // 1. Validation
 $errors = Validator::validate($data, [