Script to protect members area from multiple logins... - GoFuckYourself.com

WebDork · 02-11-2004, 10:21 PM

Basically looking for something like Pennywize (http://www.pennywize.com) where it can detect multiple IP's logging on to members area using the same username and alert me / and or change that users password.

Anyone know of anything worth looking at ?

TheDoc · 02-11-2004, 10:27 PM

http://www.proxypass.com/

chrisp420 · 02-11-2004, 10:32 PM

t4wsentry isn't bad

think the url is www.tools4webmasters.com

grannytgp · 02-11-2004, 10:40 PM

Password Sentry is pretty decent -- although it's been awhile since I've used it. Here's the link:

http://www.monster-submit.com/sentry/

raymor · 02-13-2004, 03:48 PM

Pennywize was OK back in 1999 but the password
sites and similiar threats have evolved since then
and the defenses haven't.
The same old "count the IPs" doesn't cut it anymore.
Besides the fact that with Media Player 9 out,
you can't have videos protected with the old fashioned
username/password system anymore anyway.

There is one system that has a better a approach than
Pennywize's, which was outdated in about 2001.
The new approach is also the only one that works
with the newest Media Player.
Strongbox uses a whole new approach to securing your site,
rather than trying to patch up the holes in the
username/password system, which was designed specifically to be weak.
Only Strongbox's new, cryptographically secure, approach
will give you any real protection against the current threats:
http://webmastersguide.com/?htaccess-cgi/strongbox/

SGS · 02-13-2004, 04:04 PM

Quote:

Originally posted by raymor
Pennywize was OK back in 1999 but the password
sites and similiar threats have evolved since then
and the defenses haven't.
The same old "count the IPs" doesn't cut it anymore.
Besides the fact that with Media Player 9 out,
you can't have videos protected with the old fashioned
username/password system anymore anyway.

There is one system that has a better a approach than
Pennywize's, which was outdated in about 2001.
The new approach is also the only one that works
with the newest Media Player.
Strongbox uses a whole new approach to securing your site,
rather than trying to patch up the holes in the
username/password system, which was designed specifically to be weak.
Only Strongbox's new, cryptographically secure, approach
will give you any real protection against the current threats:
http://webmastersguide.com/?htaccess-cgi/strongbox/

Does Strongbox work on load-balanced server set-ups?

02-11-2004, 10:21 PM	#1
WebDork Confirmed User Join Date: Jan 2002 Location: Sydney, Australia Posts: 402	Script to protect members area from multiple logins... Basically looking for something like Pennywize (http://www.pennywize.com) where it can detect multiple IP's logging on to members area using the same username and alert me / and or change that users password. Anyone know of anything worth looking at ? __________________ Video Ipod Porn Site with Affiliate Program. http://www.podies.com Free 1:1 Adult Webmaster Banner Exchange.

02-11-2004, 10:27 PM	#2
TheDoc Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Location: Currently Incognito Posts: 13,827	http://www.proxypass.com/ __________________ ~TheDoc - ICQ7765825 It's all disambiguation

02-11-2004, 10:32 PM	#3
chrisp420 Confirmed User Join Date: Aug 2002 Location: NY/MA Posts: 572	t4wsentry isn't bad think the url is www.tools4webmasters.com __________________ icq: 327189899

02-11-2004, 10:40 PM	#4
grannytgp Confirmed User Join Date: Aug 2002 Posts: 269	Password Sentry is pretty decent -- although it's been awhile since I've used it. Here's the link: http://www.monster-submit.com/sentry/ __________________ No sig = good sig

02-13-2004, 03:48 PM	#5
raymor Confirmed User Join Date: Oct 2002 Posts: 3,745	Pennywize was OK back in 1999 but the password sites and similiar threats have evolved since then and the defenses haven't. The same old "count the IPs" doesn't cut it anymore. Besides the fact that with Media Player 9 out, you can't have videos protected with the old fashioned username/password system anymore anyway. There is one system that has a better a approach than Pennywize's, which was outdated in about 2001. The new approach is also the only one that works with the newest Media Player. Strongbox uses a whole new approach to securing your site, rather than trying to patch up the holes in the username/password system, which was designed specifically to be weak. Only Strongbox's new, cryptographically secure, approach will give you any real protection against the current threats: http://webmastersguide.com/?htaccess-cgi/strongbox/ __________________ For historical display only. This information is not current: support@bettercgi.com ICQ 7208627 Strongbox - The next generation in site security Throttlebox - The next generation in bandwidth control Clonebox - Backup and disaster recovery on steroids