note 90582 deleted from function.sleep by danbrown
| From: | danbrown@php.net | Date: | Wed, 29 Apr 2009 13:54:31 +0000 |
| Subject: | note 90582 deleted from function.sleep by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-154000@lists.php.net to get a copy of this message | ||
Note Submitter: jjustian
----
marpetr at gmail dot com said:
"Very useful to prevent password brute forcing! Simply add few seconds timeout to login script
and the probability to guess the password decreases a lot!"
Note that this technique won't help against brute force attacks on web-based applications,
since each request starts a new process. You'll just have hundreds of instances of your
application sleeping while the attack goes on. It's probably inadvisable.