{"record":{"id":"ec2ac172c51254e0","repo":"octobercms/october","slug":"too-many-password-reset-attempts-please-try-again","errorCode":null,"errorMessage":"Too many password reset attempts, please try again in :seconds seconds.","messagePattern":"Too many password reset attempts, please try again in :seconds seconds\\.","errorType":"exception","errorClass":"ApplicationException","httpStatus":null,"severity":"error","filePath":"modules/backend/controllers/Auth.php","lineNumber":188,"sourceCode":"     * handleSubmitRestore submits the restore form\n     */\n    protected function handleSubmitRestore()\n    {\n        $rules = [\n            'login' => 'required|between:2,255'\n        ];\n\n        $validation = Validator::make(post(), $rules, [], ['login' => __('Username')]);\n\n        if ($validation->fails()) {\n            throw new ValidationException($validation);\n        }\n\n        // Throttle reset requests by IP to limit email flooding and slow\n        // username enumeration via timing analysis.\n        $limiter = new RateLimiter('backend.auth.restore');\n        if ($limiter->tooManyAttempts(5)) {\n            throw new ApplicationException(__(\"Too many password reset attempts, please try again in :seconds seconds.\", [\n                'seconds' => $limiter->availableIn()\n            ]));\n        }\n\n        $limiter->increment(600);\n\n        $user = BackendAuth::findUserByLogin(post('login'));\n\n        if (!$user) {\n            // For security reasons, only show detailed error when debug mode is on\n            if (System::checkDebugMode()) {\n                throw new ValidationException([\n                    'login' => __(\"A user could not be found with a login value of ':login'\", ['login' => post('login')])\n                ]);\n            }\n        }\n        else {\n            // User found, send reset email","sourceCodeStart":170,"sourceCodeEnd":206,"githubUrl":"https://github.com/octobercms/october/blob/b608633a7e8922487d91a8161499020121c3b3bf/modules/backend/controllers/Auth.php#L170-L206","documentation":"Error \"Too many password reset attempts, please try again in :seconds seconds.\" thrown in octobercms/october.","triggerScenarios":"Thrown at modules/backend/controllers/Auth.php:188 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b608633a7e8922487d91a8161499020121c3b3bf","analyzedAt":"2026-08-21T04:24:57.515Z","schemaVersion":2},"datasetVersion":"2026-08-21T11:28:35.574Z"}