|
member area security
Been away too long, lost my status :-)
Here is a fun one, easy enough to stop someone from hurling passwords if they are not masquerading their ip address.
but when they change it with every few hurls, and they are coming at 5 to 10/second, what can a person do to actually find out who they are. I have a possible solution, but am looking for some input on this.
Wondering about embedding a media content that will log some other info besides the IP Address, and let them get into a fake /members/ folder when the hurling starts.
would like to get into a serious discussion about this with all who are interested.
Looking forward to any responses.
Any suggestions on this would be greatly appreciated.
|