Solved

Too Many Failed Login Attempts ?

Posted on 2013-11-14
4
637 Views
Last Modified: 2013-12-03
I'm getting this on a site where I'm the new admin. There's something buggy happening where I can't login at all without going through the "request new password" mechanism.

1) Is this warning associated with a particular module?
2) Can I disable that module? Repurcussions if I do?


Error Loginlogin.JPG
0
Comment
Question by:sandshakimi
  • 2
4 Comments
 
LVL 13

Assisted Solution

by:Arrow_1
Arrow_1 earned 250 total points
ID: 39647584
Drupal has built-in flood control which will temporarily block users who have too many failed login attempts. There are no settings for this functionality out of the box but you can add some control over them by adding the Flood Control module.
0
 

Author Comment

by:sandshakimi
ID: 39651061
As an interim solution, any harm to periodically flush the flood table?
0
 
LVL 13

Expert Comment

by:Arrow_1
ID: 39652134
Not that I know of. You should be fine.
0
 
LVL 12

Accepted Solution

by:
sivagnanam chandrakanth earned 250 total points
ID: 39679895
If you flush flood table periodically, then you may loose control over the number of failed attempts.

For Example if a user has 5 failed attempts and disallowed login access 5 minutes before..Clearing flood table will grant him access in 5 minutes.

To avoid this you may need to check the timestamp column in where condition of your delete query
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Deprecated and Headed for the Dustbin By now, you have probably heard that some PHP features, while convenient, can also cause PHP security problems.  This article discusses one of those, called register_globals.  It is a thing you do not want.  …
Build an array called $myWeek which will hold the array elements Today, Yesterday and then builds up the rest of the week by the name of the day going back 1 week.   (CODE) (CODE) Then you just need to pass your date to the function. If i…
Learn how to match and substitute tagged data using PHP regular expressions. Demonstrated on Windows 7, but also applies to other operating systems. Demonstrated technique applies to PHP (all versions) and Firefox, but very similar techniques will w…
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question