How can I find out which members are shearing their passwords?
 

I run a paysite processing with verotel. My question is:

How can I know if some member is shearing their login information to my paysite with others? If multiple IP are logging in with the same username?

:helpme

Do you know any script that can do that?

thanks.

Pennywize

http://pennywize.com

thanks man!

or strongbox

http://strongbox.com :)

url?

here: http://www.bettercgi.com/strongbox/

get strongbox from webmastersguide.com and you won't have to worry about password trading

Also, make sure your passfile file is hidden away from prying eyes in a protected directory :2 cents:

thanks a lot guys!!

I use Virtual Solutions Sentry. You set as many ISP's as you want.
There is no need to worry, set at "one" and you will never have a problem. :2 cents:

help needed again...

Add these lines to your httpd.conf file
(Inside the corresponding VirtualHost for your site or members section)

Where can I find httpd.conf file? :upsidedow

Or you could get http://www.monster-submit.com/sentry/

Been using Password Sentry for over 2 years now... no problems whatsoever !! the best :)


Ivy

This one (along with Pennywise that I knew about long time ago) look pretty good. Do you use PS along with any other script (for security)=?

Should be able to add it to htaccess no?

Great question and great replies. I need to check that out also!

You might want to look at something a little more modern than
Pennywize and it's clones, which are just naive IP counters,
the adult industries first attempt at doing something about
this problem 8 years ago. Technology has advanced quite
ab it since then.
As explained in a widely circulated 1999 paper, Pennywize
actually makes it easier for an attacker to sucessfully perform
a dictionary attack against your site.