From 79764732406d6484f67d3dec045483dcb5d08c28 Mon Sep 17 00:00:00 2001
From: historia <[not public]>
Date: Fri, 18 Sep 2026 20:03:13 -0400
Subject: feat: better card ascii art

---
 internal/game/core_login_account.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'internal/game/core_login_account.go')

diff --git a/internal/game/core_login_account.go b/internal/game/core_login_account.go
index e9fa67f..3b35b15 100644
--- a/internal/game/core_login_account.go
+++ b/internal/game/core_login_account.go
@@ -158,7 +158,10 @@ func (g *Game) handlePasswordOffOwner(sess *net.Session, input string) {
 		return
 	}
 	throttle := g.ensureLoginThrottle()
-	key := loginThrottleKey(name, sess.RemoteAddr())
+	// Key on the host, not RemoteAddr: the latter carries the ephemeral
+	// source port, so a reconnect would land on a fresh key and reset the
+	// escalation. RemoteHost strips the port (see net.Session.RemoteHost).
+	key := loginThrottleKey(name, sess.RemoteHost())
 	auth := passwordAuth{}
 	acc, err := g.AccountStore.LoadAccount(name)
 	switch {
-- 
cgit v1.2.3