Geeklog Forums

Hi,

how can i protect my site to flood attacs?

this variables not running.

[code]// Login Speedlimit. $_CONF['login_attempts'] = 4; // number of login attempts allowed before speedlimit kicks in $_CONF['login_speedlimit'] = 200; // wait (in seconds) after $_CONF['login [/code]
Every body re-login-logout again again..

I'm using Geeklog 1.4.0sr5-1

---

_KEMAL_

Not sure what you're after, but that setting will only limit login attempts from the same IP address.

bye, Dirk

i tryed myself to login, there is no limit!
(ý tested on this site and my site)
you can try easyly = login & logout

There is no caution. But i remember, this variables runnig on previous versions!!

---

_KEMAL_

Okay, now I see what you mean. This setting is meant as a protection against dictionary attacks (i.e. someone trying to guess a password) and therefore only counts failed login attempts.

If you know which user that is, you can simply ban them so they can't log in any more. Would that help?

bye, Dirk

Dirk thanks for comments,

but manual ban is very hard! There must be a login protect, if there is no login protect hackers make flood easyly..

---

_KEMAL_

i have this problem too and unfortunately i can't make anything

If someone can help we are witing for that...