Support

 I sure tried to find this answer in the existing tickets, sorry if I missed it.

We have more problems with hackers trying to brute-force the /administrator login than the frontend logins.
Also, we have a lot of dumb users that often typo their passwords during front-end login attempts.

SO, I would like to set a strong rule (BAN after 2 attempts in 10 minutes) for the /administrator backend login

AND

a softer rule (BAN after 5 attempts in 1 hour) for the frontend login.

Is this possible ?

Thank you !
Super-satisfied customer
Kent

I'm sorry but we can't do that. The auto ban rules are the same for front end and back end. You need to make them loose enough that your "all thumbs" front end users don't get blocked out - too often.

You can use a secret parameter or password protect the back end to increase the protection there. And the attempts are being stopped, they are not likely to get in with more tries.

"Insanity: doing the same thing over and over again and expecting different results."

- Albert Einstein

Thanks Dale !
Regards,
Kent

You're welcome!