FrontAccounting forum — Weak Brute Force Protection?

Re: Weak Brute Force Protection?

null@example.com (cambell) — Sun, 27 Dec 2020 14:26:22 +0000

I recommend fail2ban on the server side for bruteforce detection and rejection via iptables. It can detect repeated access of the login page and x accesses in n seconds will trigger the ban.

Re: Weak Brute Force Protection?

null@example.com (albertolima) — Wed, 23 Dec 2020 16:16:03 +0000

Check this topic, it might help https://frontaccounting.com/punbb/viewtopic.php?pid=19097#p19097

Check code at function preventHijacking()

Do not forget to share with us any findings. Thks.

Weak Brute Force Protection?

null@example.com (Muhammed Ali Kösen) — Wed, 23 Dec 2020 06:14:10 +0000

When I did a test on Brute Force protection, I found that the protection consists of disabling the submit form button in HTML. Is that really all or is there a server-side protection? After all, nobody does the Brute Force attack manually through the browser.