E
E
exaller2017-04-15 00:31:06
C++ / C#
exaller, 2017-04-15 00:31:06

What competent ways can you stop password guessing for a self-written engine?

Actually, the whole question is in the title

Answer the question

In order to leave comments, you need to log in

3 answer(s)
A
anikavoi, 2018-04-16
@anikavoi

I do not get what you want.
MSVC2017 compiles fine.

D
Denis Artamonov, 2017-04-15
@ArtamonovDenis

1. introduce a limit on the number of errors when entering a password
2. if the maximum number of errors is reached - ban the ip-address for a while
--------
the easier option is to put a captcha, for example, from Google

4
4iloveg, 2017-04-15
@4iloveg

+ so that the coolhacker does not start using a proxy, you can not show him the error "they say the number of attempts completed" and issue the same page "user not found" but no longer search the database.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question