#3891 - Brute-force login attempt protection – Composr CMS: Your Data, Your Privacy, Your Control

This is a spacer post for a website comment topic. The content this topic relates to: #3891 - Brute-force login attempt protection

By Guest posted 27th Jan 2020, 3:02 PM

Just noting that this feature is sometimes called "account lockout".

By Guest posted 14th Mar 2021, 10:48 PM

I kind of think this is a lot less necessary if the user just implements standard rate limiting, which Composr supports (_config.php setup).

Sure this feature request can protect against DDOSs, but I think if a site is getting DDOSed then they should be able to afford some proper investment in network/system-level security rules (e.g. fail2ban).

That said, I still like this request.