Error

[RoderickFox]

Hi there, I tried to create an account but it said ‘Temporary limit reached’, then what should I do to solve this? Thanks a lot.

[aimeos]

This is a rate limiting mechanism for security reasons and by default, a user can create 3 accounts withing 4 hours. To change that values, adapt these settings:
- https://aimeos.org/docs/2021.x/config/c ... imit-count
- https://aimeos.org/docs/2021.x/config/c ... it-seconds

[mr.zherart]

Hi, Aimeos. Can you please describe deeply about limit-count? From the docs "(either logged in or identified by the IP address) ", I can`t find how it works with user IP.

I see how it works with userId aimeos/ai-controller-frontend/controller/frontend/src/Controller/Frontend/Order/Standard.php in construct, but nowhere see about IP.

Laravel 6. Aimeos 2021.10

Thank you

[aimeos]

If customers aren't logged in, their IP address is available as "editor" in the context object and it will be stored into the "editor" column when they create or update an order. Then, it's used to limit potential denial of service attacks.

[mr.zherart]

What will happen if IP does not exist? Currently, it is possible in laravel context.
And, please, give reference to code where editor ip in Frontend/Order used, it will be very helpful. Thank you

[aimeos]

The limit check is implemented here:
https://github.com/aimeos/ai-controller ... #L122-L190

The IP is set here in TYPO3:
https://github.com/aimeos/aimeos-typo3/ ... #L292-L317

In Laravel, the IP is set here:
https://github.com/aimeos/aimeos-larave ... #L266-L279

[mr.zherart]

Thank you I see it is order.base.editor.

[mr.zherart]

We are behind proxy and have the same IP for everyone, look here stack overflow https://stackoverflow.com/a/41769505/3090983. Seems it need to be fixed in aimeos-laravel

[aimeos]

In TYPO3, you need to set the reverseProxy* and trustedHostsPattern configuration:
https://kronova.net/tutorials/typo3/gen ... proxy.html

For Laravel, the problem can be solved by adding the IP address(es) of the proxy to the TrustProxies middleware:
https://laravel.com/docs/8.x/requests#c ... ed-proxies

[mr.zherart]

Great, thank you!