Jump to content

Lock Accounts After "x" Failed Logins For "x" Mins


Guest Logan

Recommended Posts

Yeah on this board for members pre-display name..



But what about those who register with one type of login name, and something else as a display name? Then that doesn't reveal it.



So, yeah that's a good spot, but no, I mean something a little more guaranteed.



A simple solution to that would be using the registration field for display name as an optional field(something like the subscription manager field in ACP, where there is an option for it)...even if no default option is available or made available..it can be modded :)
Link to comment
Share on other sites

well in that case../there must be some sort of a mask or option which enables/disables per group, the viewing of display name changes and maybe another option where per group options can be given where that group's disaply name change aint visible at all...for say an admin group..just like the IP being private..the display name can be displayed as "protected" and is not visible to anyone...this can also be as I said be extended on a per group basis.

Link to comment
Share on other sites

Yeah ok.. Now how about making it for v2.1, but in a way where someone doesn't have to modify the PHP files. :D


It'd be nice if Matt added it as a default feature in IPB 2.1 but I think he's done adding new features. But for now we can use Dean's mod for 2.0.

Dean, will you upgrade it to 2.1?
Link to comment
Share on other sites

That's the point, lock the username/account for "x" minutes after "x" failed login attempts. Also, a good feature would be to send the owner of the account a link in their email to unlock their account immediately too. So time or email link to unlock.

Link to comment
Share on other sites

Very true, hmm. There must be something that could be put in place to stop / limit that from happening.


Block IP. the only problem with that is if someone uses a proxy.

I hope it too, Logan.



Just discussing about it, when do you think IPB 3.0 will be released? September 2006?



:)


Lets first wait for 2.1 and I think 3.0 is further away then that.
Link to comment
Share on other sites

That's the point, lock the username/account for "x" minutes after "x" failed login attempts. Also, a good feature would be to send the owner of the account a link in their email to unlock their account immediately too. So time or email link to unlock.



Aren't you suggesting exactly what Dean's mod does ?... his mod sends out an email to the account holder so it can be unlocked.
Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...