Details
-
Sub-Task
-
Status: Resolved
-
Major
-
Resolution: Done
-
1.7.10
-
Rank:0|hzzzyy:
-
v1710.1
-
All databases
Description
*** Part of the security enhancements update ***
Users are locked-out when the defined number of failed attempts have been reached. Once locked, the user must wait a preset period of time. The lockout threshold and wait time are defined by the site administrator.
NEW PARAMETERS
Two new Global Parameters were created as part of the new lockout feature. These parameters must be defined in the PM_GLOBAL_PARAMS table for users to be locked out after the defined number of failed attempts and number of minutes they must wait before attempting to try again.
Parameter Name: PM_LOCKED_MAX_COUNT
Parameter Value: [number of times user can enter the wrong password]
Parameter Data Type: Text
Parameter Name: PM_LOCKED_WAIT_TIME
Parameter Value: [number of minutes user has to wait after being locked out]
Parameter Data Type: Text
NEW ERROR MESSAGE
The following error message will appear to users when they have reached the threshold and have now locked their account.
ERROR: Too many invalid attempts, user locked out
Users are locked-out when the defined number of failed attempts have been reached. Once locked, the user must wait a preset period of time. The lockout threshold and wait time are defined by the site administrator.
NEW PARAMETERS
Two new Global Parameters were created as part of the new lockout feature. These parameters must be defined in the PM_GLOBAL_PARAMS table for users to be locked out after the defined number of failed attempts and number of minutes they must wait before attempting to try again.
Parameter Name: PM_LOCKED_MAX_COUNT
Parameter Value: [number of times user can enter the wrong password]
Parameter Data Type: Text
Parameter Name: PM_LOCKED_WAIT_TIME
Parameter Value: [number of minutes user has to wait after being locked out]
Parameter Data Type: Text
NEW ERROR MESSAGE
The following error message will appear to users when they have reached the threshold and have now locked their account.
ERROR: Too many invalid attempts, user locked out