Details
-
Type:
New Feature
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 4.6.0
-
Fix Version/s: 5.1.0-b1
-
Component/s: Client Interface, Staff Interface
-
Labels:None
Description
Add an option to enable a CAPTCHA on client and admin login pages, potentially independently. This should be a setting someplace, not enabled by default. Can use reCAPTCHA, may need to have reCAPTCHA settings as a company setting, and this would be a company setting also.
If the CAPTCHA is not entered correctly, don't do a database lookup at all to verify if the user/pass is legitimate. The CAPTCHA in large part is intended to block automated brute force attacks, that can result in loss of service / overloaded MySQL.
Requires more discussion.
Activity
Paul Phillips
created issue -
| Field | Original Value | New Value |
|---|---|---|
| Rank | Ranked higher |
| Rank | Ranked higher |
| Story Points | 3 |
| Sprint | 5.1.0 Sprint 1 [ 125 ] |
| Rank | Ranked higher |
| Rank | Ranked higher |
| Fix Version/s | 5.1.0-b1 [ 11703 ] | |
| Fix Version/s | Short Term [ 10800 ] |
| Assignee | Abdy Franco [ abdy ] |
| Status | Open [ 1 ] | In Progress [ 3 ] |
If the idea is to prevent automated submissions, adding it to the "Reset My Password" and "Forgot My Username" sections seems like a good idea. Without it, a bot could easily make lots of requests for those actions.. so, yeah let's do it.
Paul Phillips
added a comment - If the idea is to prevent automated submissions, adding it to the "Reset My Password" and "Forgot My Username" sections seems like a good idea. Without it, a bot could easily make lots of requests for those actions.. so, yeah let's do it. | Remaining Estimate | 0 minutes [ 0 ] | |
| Time Spent | 5 hours, 44 minutes [ 20640 ] | |
| Worklog Id | 14696 [ 14696 ] |
| Time Spent | 5 hours, 44 minutes [ 20640 ] | 1 day, 5 hours, 22 minutes [ 48120 ] |
| Worklog Id | 14697 [ 14697 ] |
| Status | In Progress [ 3 ] | In Review [ 5 ] |
| Resolution | Fixed [ 1 ] |
| Sprint | 5.0.1 Sprint 1 [ 125 ] | 5.1.0 Sprint 1 [ 129 ] |
| Status | In Review [ 5 ] | Closed [ 6 ] |
The captcha should added to "Reset My Password" and "Forgot My Username" as well?