summaryrefslogtreecommitdiff
path: root/doc/bruteforce-protection.markdown
diff options
context:
space:
mode:
authorGerardo Zamudio <gerardozamudio@users.noreply.github.com>2016-02-24 23:48:50 -0600
committerGerardo Zamudio <gerardozamudio@users.noreply.github.com>2016-02-24 23:48:50 -0600
commite4de6b3898b64b26d29aff31f21df5fda8055686 (patch)
tree575f8a65440f291d70a070d168eafca8c82a6459 /doc/bruteforce-protection.markdown
parentd9ffbea174ea6524d0a22f8375ca8b3aa04a3c96 (diff)
parenta6540bc604c837d92c9368540c145606723e97f7 (diff)
Merge pull request #1 from fguillot/master
Update from upstream
Diffstat (limited to 'doc/bruteforce-protection.markdown')
-rw-r--r--doc/bruteforce-protection.markdown10
1 files changed, 5 insertions, 5 deletions
diff --git a/doc/bruteforce-protection.markdown b/doc/bruteforce-protection.markdown
index 633cfe87..a7bef45e 100644
--- a/doc/bruteforce-protection.markdown
+++ b/doc/bruteforce-protection.markdown
@@ -1,14 +1,14 @@
-Bruteforce Protection
-=====================
+Brute Force Protection
+======================
The brute force protection of Kanboard works at the user account level:
-- After 3 authentication failure for the same username, the login form show a captcha image to prevent automated bot tentatives.
+- After 3 authentication failure for the same username, the login form shows a captcha image to prevent automated bot tentatives.
- After 6 authentication failure, the user account is locked down for a period of 15 minutes.
This feature works only for authentication methods that use the login form.
-However, **after 3 authentication failure through the user API**, the account have to be unlocked by using the login form.
+However, **after three authentication failure through the user API**, the account has to be unlocked by using the login form.
Kanboard doesn't block any IP addresses since bots can use several anonymous proxies. However, you can use external tools like [fail2ban](http://www.fail2ban.org) to avoid massive scans.
@@ -21,6 +21,6 @@ define('BRUTEFORCE_CAPTCHA', 3);
// Lock the account after 6 authentication failure
define('BRUTEFORCE_LOCKDOWN', 6);
-// Lock account duration in minute
+// Lock account duration in minutes
define('BRUTEFORCE_LOCKDOWN_DURATION', 15);
```