If 3 login fail capchat ?

[Miaourt]

THis is a enchancement, not a bug, but I think this will be a good feature to prevent brute force ! ):

[claudyus]

I don't really like the captcha but if you propose a PR that made this features optional I would happly accept it.

Here you have the auths methods https://github.com/claudyus/LXC-Web-Panel/tree/master/lwp/authenticators happy hacking!

[Miaourt]

If I can code I will be happy to made a PR :p I'm just one of those Sysadmin who can only use things and suggest that, wich is really a security problems I think o/

Envoyé depuis l'application myMail pour Android vendredi, 17 juillet 2015, 00:51PM +02:00 de Claudio Mignanti < notifications@github.com> :

I don't really like the captcha but if you propose a PR that made this features optional I would happly accept it.
Here you have the auths methods https://github.com/claudyus/LXC-Web-Panel/tree/master/lwp/authenticators happy hacking!
—
Reply to this email directly or view it on GitHub .

[claudyus]

If we modify the error logs in a format suitable to fail2ban we could obtain same results with much less effort.

[Miaourt]

Good idea yup!

Envoyé depuis l'application myMail pour Android vendredi, 17 juillet 2015, 03:22PM +02:00 de Claudio Mignanti < notifications@github.com> :

If we modify the error logs in a format suitable by fail2ban we could obtain same results with much less effort.
—
Reply to this email directly or view it on GitHub .