PDA

View Full Version : cookies lockout method

pHAZE_1
04-07-2002, 02:26 PM
on certain networks they have a password lockout method, ie you enter the wrong password 'x' amount of times and your locked out from being able to enter a password for 'x' amount of time.. is this possible on vbulletin? this would drastically cut down on hackerz.
pHAZE_1
04-08-2002, 02:31 AM
up
sammy22
04-09-2002, 03:01 AM
bump\
Scott MacVicar
04-09-2002, 06:21 AM
This would be possible but have you thought about the consequences?, whats to stop someone from picking an admin account and deliberately getting it wrong X amount of times and disabling their account, they could then do this with all the admins and all the mods.

There is a hack to log failed logins in my sig, when people try to login and they get it wrong it ads it to the table which you can then view via the admin panel.
pHAZE_1
04-09-2002, 02:49 PM
i never did think of the consequences, but i would still love to see this possible. too bad i dont know about any kind of stuff like this.
DjSap
04-09-2002, 02:57 PM
one solution is that the account gets locked for only that ip that has entered the wrong pass 3 times.
Admin
04-09-2002, 02:59 PM
Scott is right, but maybe you can limit it to entering the wrong password, from the same IP address, XX times. So even if a hacker enters the wrong password 3 times for example, a person from a different computer can still try to login.
pHAZE_1
04-09-2002, 04:15 PM
good point, do you think that this is possible? and if it is possible, would it be a free hack or would you charge people. and if you did charge people, could i get it for free since i came up with the idea? atleast ive never seen this idea anywhere else,so i think i came up with it. =]
Admin
04-09-2002, 05:01 PM
I'll see what I can do :) And if I do it, it will be free of course.
Admin
04-09-2002, 07:36 PM
Ok I think I'm done... you can define the time period (i.e 15 minutes) and how many times the user can try to login before he is blocked. I'll release it tomorrow. :)

Maybe if I have some time I can write something like "Require unblcok", so you get an e-mail and if you verify it the block is removed.
pHAZE_1
04-21-2002, 08:25 PM
Hey FireFly its been a little while, have you accomplished this hack yet? just curious
Dixiemill
04-22-2002, 05:55 PM
up :nervous:
Snapperhaed
04-04-2003, 04:19 PM
Ive searched high and low and am unable to find this type hack anywhere. Has anyone released it?
Erwin
04-04-2003, 10:34 PM
No, not yet.