Plugin Directory

Changeset 607722


Ignore:
Timestamp:
10/04/2012 01:14:56 AM (13 years ago)
Author:
convissor
Message:

Fix ol in lockout/slowdown faq. Keep .mo from being code block.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • login-security-solution/trunk/readme.txt

    r607721 r607722  
    337337* _Invalid or Valid Credentials by Attacker or Actual User_
    338338
    339     1) Process authentication request (check IP address)
    340     1) Error message: "Too many failed login attempts." (ACCESS DENIED.)
     339    1. Process authentication request (check IP address)
     340    1. Error message: "Too many failed login attempts." (ACCESS DENIED.)
    341341
    342342Note, this approach means an actual user can be denied access for 12 hours after making 4 mistakes.
     
    347347* _Invalid Credentials by Attacker or Actual User_
    348348
    349     1) Process authentication request (check IP, user name, and password)
    350     1) Slow down the response
    351     1) Error message: "Incorrect username or password." (ACCESS DENIED.)
     349    1. Process authentication request (check IP, user name, and password)
     350    1. Slow down the response
     351    1. Error message: "Incorrect username or password." (ACCESS DENIED.)
    352352
    353353* _Valid Credentials by Attacker_
    354354
    355     1) Process authentication request (check IP, user name, and password)
    356     1) Slow down the response
    357     1) Set force password change flag for user
    358     1) Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.)
     355    1. Process authentication request (check IP, user name, and password)
     356    1. Slow down the response
     357    1. Set force password change flag for user
     358    1. Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.)
    359359
    360360* _Valid Credentials by Actual User_
    361361
    362     1) Process authentication request (check IP, user name, and password)
    363     1) (If user is coming from their verified IP address, let them in, END)
    364     1) Slow down the response
    365     1) Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.)
    366     1) On subsequent request... user verifies their identity via password reset process
    367     1) User's IP address is added to their verified IP list for future reference
     362    1. Process authentication request (check IP, user name, and password)
     363    1. (If user is coming from their verified IP address, let them in, END)
     364    1. Slow down the response
     365    1. Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.)
     366    1. On subsequent request... user verifies their identity via password reset process
     367    1. User's IP address is added to their verified IP list for future reference
    368368
    369369So both plugins deny access to attackers. But Login Security Solution has
     
    402402
    403403To produce the machine readable translations used by WordPress' gettext
    404 implementation, use the scripts I made for generating all of the `.po` and
    405 `.mo` files:
     404implementation, use the scripts I made for generating all of the `.po`
     405and `.mo` files:
    406406
    407407* `cd languages`
Note: See TracChangeset for help on using the changeset viewer.