FrontAccounting forum — Weak Brute Force Protection?

Re: Weak Brute Force Protection?

2020-12-27T14:26:22Z

I recommend fail2ban on the server side for bruteforce detection and rejection via iptables. It can detect repeated access of the login page and x accesses in n seconds will trigger the ban.

Re: Weak Brute Force Protection?

2020-12-23T16:16:03Z

Check this topic, it might help https://frontaccounting.com/punbb/viewtopic.php?pid=19097#p19097

Check code at function preventHijacking()

Do not forget to share with us any findings. Thks.

Weak Brute Force Protection?

2020-12-23T06:14:10Z

When I did a test on Brute Force protection, I found that the protection consists of disabling the submit form button in HTML. Is that really all or is there a server-side protection? After all, nobody does the Brute Force attack manually through the browser.