aertmann/brute-force

Simple brute-force prevention (account locking) for Flow

AE.BruteForce

, _(*1)

Introduction

This package provides simple brute-force prevention (account locking) for Neos/Flow., _(*2)

A notification email can be send to an administrator when an account has been locked., _(*3)

Compatible with Neos 3.x or later / Flow 4.x or later (tested until 7.3), _(*4)

Be aware that there are ways to circumvent this protection and it can be misused, see Blocking Brute Force Attacks for more information., _(*5)

Note that the threshold is disabled in development context by default. To override it, create a Settings.yaml configuration file inside a Development folder inside a Configuration folder., _(*6)

Installation

composer require "aertmann/brute-force:~2.0", _(*7)

Configuration

Failed attempts threshold and notification mail can be configured in Settings.yaml., _(*8)