'Incorrect password' threshold (perhaps forcing a lockout) ?

Started by aegersz, August 09, 2016, 12:47:48 AM

Previous topic - Next topic

aegersz

This may be in the wrong place so I apologise for that but I wonder if there is a setting and action for when too many password attempts that may result in any type of lockout ?

I see the log is full of many attempts and I wonder if I can stop that possibly opportunistic behaviour ?

Or should I consider installing http://custom.simplemachines.org/mods/index.php?mod=2181 ?
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

Arantor

There isn't a setting but if a user tries three times in a row it takes them to the forgotten password screen.

Having a lockout would be bad as it would lock legitimate users, eg yourself, out of the system.
Holder of controversial views, all of which my own.


aegersz

... so then you wouldn't recommend that mod ?

one more thing, can i change the value of the built-in "3 failures and we send you to the forgotten password screen" ?
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

Arantor

No, I really wouldn't recommend it.

Also, there's no setting for it, nor should it be changed because users can and do legitimately forget or mistype their passwords.
Holder of controversial views, all of which my own.


aegersz

I have tested the mod and it conflicts with what SMF wants to do, sends duplicate emails and you are right, it's a great way for someone to lock me out of everything (my IP changes too).

i will not install the mod after careful consideration and your advice.

Thanks.
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

Advertisement: