13
Quote:
snow77 wrote:
I agree with Hervet
One thing is just missing, on the form of an option, a way to block the account after, let say, 3 unsuccessful logins.
but then considering the second issue that arises from this that irmtfan and rplima came aware of:
If this is implemented anyone can block account of anyone, includding admin account. Really this has that to be thought better before being implemented.
Yes, before 3 account, start captcha, good idea too.
Quote:
which is not a nice thing at all.
It ocurred to me..to overcome this, is to do it the gmail way ...to not block the account ...but, after 3 failed intents of logging in, to make a captcha appear. This is would be make login security stronger.
Beautfool, really one special account for it
![](https://xoops.org/uploads/smil3dbd4d6422f04.gif)
Remember, this code is for register, for login, 3 account fail is important too captcha, but is parameter account is in admin section too and preferences.
Exist hack by Dugris for image captcha, in analysing it.