Implemented Captcha on authorization

[ausmann]

Hello.
How to install ReCaptcha (or hCaptcha) on admin authorization pages?

Оptionally available:

../?a=admin
../?a=user_cpl
../?a=lost_pw

Security measures against brute force attacks.

 

[Mark]

Hello.
How to install ReCaptcha (or hCaptcha) on admin authorization pages?

Оptionally available:

../?a=admin
../?a=user_cpl
../?a=lost_pw

Security measures against brute force attacks.

Hello, at this time we only have timeout brute force prevention in place on the admin login. I will take a look at adding recaptcha to all logins as a core option for 1.8.

** moving to core feature requests

 

[ausmann]

Thanks Mark. Modern Internet requires modern security solutions.)

There is experience how to deal with hacking attempts (on wordpress). I recommend to consider:
1. Captcha for the data entry form.
2. "Honey pot" for the registration page (invisible checkpoint for users but noticeable for spam programs).
3. The ability to independently replace the standard links to the admin panel and registration.