[COMPLETE] security idea?

[vivithemage]

After 4 failed log in attempts, maybe force temp ban the user/ip?

[urgido]

good idea.

I want to know if is possible disable the lost password link.


Regards

[Mike]

Hello,

It is currently not possible to disabled the forgot password link.

If there is more concern about it, we can certainly add this ability.

Thanks

[urgido]

I think it's good idea a function that allow disable lost password link.. Why? Avoid malicious users.

Politic: If the user lost his password must be contact the respect support team to avoid confusion.

In my case I use WHMCS so for that reason I want to able do this.


REGARDS

[vivithemage]

I do like the option of letting users retrieve there own passwords though. I wish we could integrate WHMCS and Panenthe log ins though, to minimize the amount of passwords clients have to remember.

[Mike]

Hello,

Okay, I will see what I can do about getting this into the 1.0.5 install.

Thanks

[Mike]

Forgot password link can now be disabled in 1.0.5 and full login attempt checking and banning can be done on 1.0.5.

Thanks

[urgido]

tks Mike!