Hello,

I'm using a modified version of sfguard that does:

1) I added a delay after a password failure (every failed attempt
increments the delay by a fraction of php max_execution_time) and kept
a count of the failures and the time-stamp of the last on the
sfguardprofile table.

2) I added a simple javascript version of the login form to scramble
the password, mostly to avoid automatic sniffing tools.

I would like some sort of (1) included in the sfguard plugin. and
maybe (2) for a new sfguardhardened plugin.

Is someone else interested in those, specially after the tweter
scandal?

Best,

Pablo
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to