Catch errors from user.login:failed hook

getkirby · Oct 17, 2022 · 38214ac · 38214ac
1 parent cf0b8c7
commit 38214ac
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/Cms/Auth.php b/src/Cms/Auth.php
@@ -551,7 +551,12 @@ public function validatePassword(string $email, string $password)
 		} catch (Throwable $e) {
 			// log invalid login trial unless the rate limit is already active
 			if (($e->getDetails()['reason'] ?? null) !== 'rate-limited') {
-				$this->track($email);
+				try {
+					$this->track($email);
+				} catch (Throwable $e) {
+					// $e is overwritten with the exception
+					// from the track method if there's one
+				}
 			}
 
 			// sleep for a random amount of milliseconds