Limit password attempts for user at login

The-Encryption-Compendium / the-encryption-compendium

GNU General Public License v3.0

2 stars 0 forks source link

Closed prgu6170 closed 4 years ago

prgu6170 commented 4 years ago

Is your feature request related to a problem? Please describe. Currently users can try to brute force for passwords

Describe the solution you'd like Implement rate limitation for passwords at login, and lock the user if 5 or 10 incorrect password attempts

prgu6170 commented 4 years ago

nginx rate limiting should take care of this