From 5e0a88e3554cb837f0933b81fb84f28f89d0f7de Mon Sep 17 00:00:00 2001 From: ed Date: Mon, 5 Oct 2026 22:36:30 +0000 Subject: [PATCH] ban-pw basic-auth; closes #1660 --- README.md | 2 +- copyparty/httpcli.py | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 7537d0972..fc3fd9343 100644 --- a/README.md +++ b/README.md @@ -572,7 +572,7 @@ if you want to grant access to all users who are logged in, the group `acct` wil * to do the opposite, granting access to everyone who is NOT logged in. `*,-@acct` does the trick, for example `-v /srv/welcome:welcome:r,*,-@acct` * single users can also be subtracted from a group: `@admins,-james` -anyone trying to bruteforce a password gets banned according to `--ban-pw`; default is 24h ban for 9 failed attempts in 1 hour +anyone trying to bruteforce a password gets banned according to `--ban-pw` (assuming [real-ip](#real-ip) is configured correctly); default is 24h ban for 9 failed attempts in 1 hour and if you want to use config files instead of commandline args (good!) then here's the same examples as a configfile; save it as `foobar.conf` and use it like this: `python copyparty-sfx.py -c foobar.conf` diff --git a/copyparty/httpcli.py b/copyparty/httpcli.py index f660da42f..3036e623d 100644 --- a/copyparty/httpcli.py +++ b/copyparty/httpcli.py @@ -738,6 +738,7 @@ class HttpCli(object): hpw = self.asrv.ah.hash(bauth) if self.asrv.iacct.get(hpw): break + bauth = zs except: pass