PDA

View Full Version : I assume that a forum passwd


abqsbs
02-02-2012, 11:24 PM
uses the same mechanics as the Forum Login option and have read through a post https://www.vbulletin.com/forum/archive/index.php/t-166062.html and feel quite safe in them not being accessed. I've got business docs sitting inside a closed/sticky post that is passwd'ed with a 12 char complex num's & letters passwd.

OT. Is there a "max_login_attempts" that can be set in the CPanel to kick them out for a specified amount of time or does it also default to the CMS login properties?

Disasterpiece
02-02-2012, 11:28 PM
Your linked thread is from 2005.

And I don't get what you're trying to say/ask.

abqsbs
02-02-2012, 11:31 PM
I'm aware of the 2005 date.

Is a forum passwd as safe as a login passwd based on vB login mechanics?

Thank's for the reply.

kh99
02-02-2012, 11:53 PM
Is a forum passwd as safe as a login passwd based on vB login mechanics?

Looking at the code, it doesn't look like it to me. It looks like there's no limit to guessing and no delay for a wrong guess.

abqsbs
02-03-2012, 02:16 AM
Looking at the code, it doesn't look like it to me. It looks like there's no limit to guessing and no delay for a wrong guess.

Where might I find section of code that you looked at?

kh99
02-03-2012, 02:41 AM
I was looking at function verify_forum_password() in includes/functions.php. It's called at the beginning of showthread.php. I also added a password to a forum and tried entering incorrect passwords.