Simple Machines Community Forum

SMF Development => Feature Requests => Topic started by: BeberGold on December 29, 2022, 04:05:27 PM

Title: Security: make validatePasswordFlood() in LogInOut.php user controllable
Post by: BeberGold on December 29, 2022, 04:05:27 PM
This request comes from the discussion on this link:
https://www.simplemachines.org/community/index.php?topic=584595.msg4142231#msg4142231

Quote from: shawnb61 on December 29, 2022, 01:38:39 PMIn addition to that, there is password flood detection & control.

If we detect multiple attempts within a 10 second window, we don't even let them know if they get it right...

For more info, look at validatePasswordFlood() in LogInOut.php.

These security parameters are not currently user controllable.

A GUI option for the administrator would be nice. Would it be possible to adjust them in the security settings of the board please?

Thank you.
Title: Re: Security: make validatePasswordFlood() in LogInOut.php user controllable
Post by: BeberGold on June 13, 2023, 02:27:54 AM
Any update on this request please?