> the best place to put feature requests and code is the official Django
> tracker:http://code.djangoproject.com/simpleticket; Otherwise,
> there's lot of chance that your request will get lost in the infinite
> abyss of everyone's mail boxes. It's also more convenient to put code
> there and review it.

Thank, next time i will use the tracker.

> As for the idea itself:
>
> 1) Using cracklib must be an optional feature - bundling it with
> django is probably not an option (Django is great, because it doesn't
> require a compiler to install from source)

I agree using external dependencies written in another language is not
a good thing.


> 2) "Maximum Login attempts" - it's not something I really like. This
> usually penalizes the user, who now has to reset password, wait for
> the ban to timeout or do something else to unlock his/her account.

I agree it is not user friendly but i had to implement it to protect
the application from brute forces attacks, the method i use is after
10 failed attempts i block the login for that username for 10 mins.

>Thus, your code is perfect for a 3rd party application.

I will check how to make a 3rd party applications and adapt to this
case.

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/django-developers?hl=en.

Reply via email to