Authen_DAP
| Recommend this page to a friend! |  Stumble It! |
 Bookmark in del.icio.us |
| Author | ||
 |
|
Innovation award Nominee: 4x | |||||||||||||||||||
This offers protection against automated attempts to guess login passwords also known as dictionary attacks.
It works by logging failed access attempts and when necessary it blocks the access to users that have failed to login too many times, as it may be an attack of a cracker using a dictionary of common passwords trying guess the correct password with an automated script.
The class uses a shared memory storage access class to keep track of the failed login attempts of each user.
It works by logging failed access attempts and when necessary it blocks the access to users that have failed to login too many times, as it may be an attack of a cracker using a dictionary of common passwords trying guess the correct password with an automated script.
The class uses a shared memory storage access class to keep track of the failed login attempts of each user.
| Classes of Craig Manley | > | Authen_DAP | > | Download .zip .tar.gz | > |  Support forum |
> |  Blog |
> |   Latest changes |
||
|
|||||||||||||||||||||||
| Groups |  User ratings |
Dependencies | Applications |  Files |
||||||
| Groups | ||
 |
User Management | User records, authentication and session handling | View top rated classes |
|
Security | Security protection and attack detection | View top rated classes |
| Innovation Award | ||
 January 2005 Number 6 |
One the types of attacks to breach the security of systems is to attempt to guess the access passwords of the system users. Usually, the attacker resorts to dictionaries of common passwords that users tend to use, and try them all until one succeeds. This brute force attack method is usually known as dictionary attack. This class provides a solution to protect against dictionary attacks a site that require the users to authenticate to have access to restricted pages. It keeps track of login attempts to the same account, disabling access to that account for a given period after a few consecutive failed attempts. This way, dictionary attack attempts are discouraged as they may take a very very long to be successful. Manuel Lemos |
| User ratings | ||
| There are not enough user ratings to display for this class. |
| Packages needed by this class | ||
| Class | Dependency | Why it is needed |
|---|---|---|
| IPC Shared Memory | for shared memory |
| Applications that use this class | ||
No application links were specified for this class.
If you know an application of this package, send a message to the author to add a link here.| Files |
||
| File | Role | Description |
|---|---|---|
 DAP.php |
Class | The main class, based on an existing Perl class of mine. |
| README.TXT |
Data | Instructions |
| tdap.php |
Example | Example/test script for Authen_DAP. |
| Download all files: authen_dap.tar.gz authen_dap.zip |
For more information send a message to info at phpclasses dot org.
Copyright (c) Icontem 1999-2013