Static reason for login failure to prevent bruteforce

diff --git a/src/Module/Login.php b/src/Module/Login.php
index e6bb933f0f83e2fb907888f7f43bd3dac661c891..99401ebbe4a2e23b7d85e098f56017cb2e37c151 100644 (file)
--- a/src/Module/Login.php
+++ b/src/Module/Login.php
@@ -140,7 +140,7 @@ class Login extends BaseModule
                        }
                } catch (Exception $e) {
                        logger('authenticate: failed login attempt: ' . notags($username) . ' from IP ' . $_SERVER['REMOTE_ADDR']);
-                       info('Login failed: ' . $e->getMessage() . EOL);
+                       info('Login failed. Please check your credentials.' . EOL);
                        goaway();
                }