Mar 16, 2020
4 min read
Laravel: Tackling down the breadth-first attack
No need to provision a full firewall for just something so easy to fix
The default code that throttles logins in Laravel is very basic: it will throttle the combination of the device IP and the user ID (the email by default) if the login fails. That’s it.
