note 28912 added to function.sleep
| From: | josh at rack1 dot php dot net | Date: | Mon, 27 Jan 2003 22:33:28 +0000 |
| Subject: | note 28912 added to function.sleep | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-42887@lists.php.net to get a copy of this message | ||
Contrary to previous posts, sleep provides not security whatsoever against crackers. They can quite
easily create a multithreaded program that will try 1000 passwords at a time effectively disabling
your sleep pause, and sessions don't help as each a request can make itself look like a new
session. The only way to make this effective at all is to store the last time a user attempted to
login in a database and onyl allow x tries per time period.
--
http://www.php.net/manual/en/function.sleep.php
http://master.php.net/manage/user-notes.php?action=edit+28912
http://master.php.net/manage/user-notes.php?action=delete+28912
http://master.php.net/manage/user-notes.php?action=reject+28912