• You have a character minimum setting, why not add a maximum as well? For those of us who use wordpress as a site and not a blog, we could set the 2 numbers to be exactly the same securing the log in page even more so. And blocking many code injection attempts because the code is not the right character length. So it never gets tried as an alternative login because not being the right length = it does not even get processed.

    Same goes for those just trying random passwords to get in. None would get processed because they do = the right length in characters. And because that would make them exceed the attempts allowed quicker, they would get blocked while not one thing they tried was actually processed. But this would only work if the character length was the first priority before the password gets processed. Therefore they would have to get around that before anything else.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Thread Starter ikester7579

    (@ikester7579)

    Also have it to where the error does not say wrong character length so the hacker does not know what the exact problem is. There they continue down the wrong path trying to hack and wasting their time.

Viewing 1 replies (of 1 total)
  • The topic ‘Login security suggestion’ is closed to new replies.