?
Solved

Too Many Failed Login Attempts ?

Posted on 2013-11-14
4
Medium Priority
?
705 Views
Last Modified: 2013-12-03
I'm getting this on a site where I'm the new admin. There's something buggy happening where I can't login at all without going through the "request new password" mechanism.

1) Is this warning associated with a particular module?
2) Can I disable that module? Repurcussions if I do?


Error Loginlogin.JPG
0
Comment
Question by:sandshakimi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 13

Assisted Solution

by:Aaron Feledy
Aaron Feledy earned 1000 total points
ID: 39647584
Drupal has built-in flood control which will temporarily block users who have too many failed login attempts. There are no settings for this functionality out of the box but you can add some control over them by adding the Flood Control module.
0
 

Author Comment

by:sandshakimi
ID: 39651061
As an interim solution, any harm to periodically flush the flood table?
0
 
LVL 13

Expert Comment

by:Aaron Feledy
ID: 39652134
Not that I know of. You should be fine.
0
 
LVL 12

Accepted Solution

by:
sivagnanam chandrakanth earned 1000 total points
ID: 39679895
If you flush flood table periodically, then you may loose control over the number of failed attempts.

For Example if a user has 5 failed attempts and disallowed login access 5 minutes before..Clearing flood table will grant him access in 5 minutes.

To avoid this you may need to check the timestamp column in where condition of your delete query
0

Featured Post

[Webinar] Lessons on Recovering from Petya

Skyport is working hard to help customers recover from recent attacks, like the Petya worm. This work has brought to light some important lessons. New malware attacks like this can take down your entire environment. Learn from others mistakes on how to prevent Petya like worms.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Since pre-biblical times, humans have sought ways to keep secrets, and share the secrets selectively.  This article explores the ways PHP can be used to hide and encrypt information.
3 proven steps to speed up Magento powered sites. The article focus is on optimizing time to first byte (TTFB), full page caching and configuring server for optimal performance.
The viewer will learn how to look for a specific file type in a local or remote server directory using PHP.
This tutorial will teach you the core code needed to finalize the addition of a watermark to your image. The viewer will use a small PHP class to learn and create a watermark.
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question