Page 1 of 1

Lock out Policy

Posted: 2022-08-14 10:17
by nisar
It is observed that the user login page in the application does not have any protection against repetitive brute force password guessing attacks. In the existing scenario a malicious user can repeatedly make attempts for gaining access to a specific user account by hit and trial method.

Is there a way to implement lock out policy in AppGINI Version 22.14 :mrgreen:

Re: Lock out Policy

Posted: 2022-08-14 11:59
by jsetzer
A quick google search for appgini and brute force gave a couple of results.

Olaf did a lot security related:
viewtopic.php?t=3168

Check login hooks in __global.php

Re: Lock out Policy

Posted: 2022-08-14 23:21
by peebee