Changeset 607722
- Timestamp:
- 10/04/2012 01:14:56 AM (13 years ago)
- File:
-
- 1 edited
-
login-security-solution/trunk/readme.txt (modified) (3 diffs)
Legend:
- Unmodified
- Added
- Removed
-
login-security-solution/trunk/readme.txt
r607721 r607722 337 337 * _Invalid or Valid Credentials by Attacker or Actual User_ 338 338 339 1 )Process authentication request (check IP address)340 1 )Error message: "Too many failed login attempts." (ACCESS DENIED.)339 1. Process authentication request (check IP address) 340 1. Error message: "Too many failed login attempts." (ACCESS DENIED.) 341 341 342 342 Note, this approach means an actual user can be denied access for 12 hours after making 4 mistakes. … … 347 347 * _Invalid Credentials by Attacker or Actual User_ 348 348 349 1 )Process authentication request (check IP, user name, and password)350 1 )Slow down the response351 1 )Error message: "Incorrect username or password." (ACCESS DENIED.)349 1. Process authentication request (check IP, user name, and password) 350 1. Slow down the response 351 1. Error message: "Incorrect username or password." (ACCESS DENIED.) 352 352 353 353 * _Valid Credentials by Attacker_ 354 354 355 1 )Process authentication request (check IP, user name, and password)356 1 )Slow down the response357 1 )Set force password change flag for user358 1 )Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.)355 1. Process authentication request (check IP, user name, and password) 356 1. Slow down the response 357 1. Set force password change flag for user 358 1. Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.) 359 359 360 360 * _Valid Credentials by Actual User_ 361 361 362 1 )Process authentication request (check IP, user name, and password)363 1 )(If user is coming from their verified IP address, let them in, END)364 1 )Slow down the response365 1 )Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.)366 1 )On subsequent request... user verifies their identity via password reset process367 1 )User's IP address is added to their verified IP list for future reference362 1. Process authentication request (check IP, user name, and password) 363 1. (If user is coming from their verified IP address, let them in, END) 364 1. Slow down the response 365 1. Error message: "Your password must be reset. Please submit this form to reset it." (ACCESS DENIED.) 366 1. On subsequent request... user verifies their identity via password reset process 367 1. User's IP address is added to their verified IP list for future reference 368 368 369 369 So both plugins deny access to attackers. But Login Security Solution has … … 402 402 403 403 To produce the machine readable translations used by WordPress' gettext 404 implementation, use the scripts I made for generating all of the `.po` and405 `.mo` files:404 implementation, use the scripts I made for generating all of the `.po` 405 and `.mo` files: 406 406 407 407 * `cd languages`
Note: See TracChangeset
for help on using the changeset viewer.