Confirmed users
491
edits
WebAppSec/Secure Coding Guidelines: Difference between revisions
Jump to navigation
Jump to search
→Admin Login Pages
| Line 285: | Line 285: | ||
1. Controls are in place to prevent brute force attacks<br> | 1. Controls are in place to prevent brute force attacks<br> | ||
Options (any of these are fine): | Options (any of these are fine): | ||
* Admin page behind ssl vpn (most popular option) | |||
* Account Lockout | * Account Lockout | ||
* CAPTCHA's after 5 failed logins | * CAPTCHA's after 5 failed logins | ||