Login Security

ilo - September 24, 2007 - 22:07

With Login security a site administrator may add two types of access control to the login forms (default and block) within a defined time window. After login, a module option allows admins to display the last login or site access/activity to the user as a status message.

Important note

To keep this module life and running, some tweakings are going to be introduced these days. If you have any idea or just want to share what's not being used at all in your setup, a new issue was created to collect all that information and prepare the v1.0 roadmap, and settle the D7 feature list.
Please, fill in your important considerations to be included as soon as you can in:

#397890: create a stable version for the 6.x branch of the login_security module

These are the features included:

Soft Protections:

- Request Time delay: On any failed login, a time delay is included to the submit
request, hardenning any bruteforce attack to the login form.
- Block login forms or requests, when the protection flag is enabled the form is
never submited, and any request even with a valid form token ID will be dropped,
but the host still can access the site.

Hard Protections:

- Block account: on a number of failed attempts, the account can be blocked.
- Block IP: on a number of failed attempts, a host may be added to the access
control list.

Site activity messages:

May help users identify when their account has been compromised.
- Last login: tells the user after a valid login when their last successful login was.
- Last access: tells the user after a valid login when the last time someone accessed content with their account.

Releases

Official releasesDateSizeLinksStatus
6.x-1.0-beta12009-Jun-2117.04 KBRecommended for 6.xThis is currently the recommended release for 6.x.
5.x-1.12008-Jan-2414.33 KBRecommended for 5.xThis is currently the recommended release for 5.x.
Development snapshotsDateSizeLinksStatus
6.x-1.x-dev2009-Jun-2417.55 KBDevelopment snapshotDevelopment snapshots are automatically regenerated and their contents can frequently change, so they are not recommended for production use.
5.x-1.x-dev2009-Jun-2014.87 KBDevelopment snapshotDevelopment snapshots are automatically regenerated and their contents can frequently change, so they are not recommended for production use.


 
 

Drupal is a registered trademark of Dries Buytaert.