|
Many members areas will get brute force attacks 24X7 and also attempts at locating every type of script to help gain access to your servers -
password protection scripts such as pennywize is a must - But, the worst thing any web site can do is to allow members to choose their own passwords -
Members are not in the slightest bit security concsious and couldn't give two figs if their user/passes are abused (Because everybody on the planet knows them), in fact, they demand their cash back when they are and the passes are removed -
Issue your new members with user and passes which included numbers, lower, upper case and symbols - Then let brute forces waste the whole day to get nothing.
|