Security on Webuzo Log In to Increase

Security on Webuzo Log In to Increase

Guest	April 14, 2016, 11:21 am \| Post: 1
Group: Guest Status:	Maybe for Two factor authentication can be just an email with a link for direct access to the control panel. So user need to put username and password into webuzo and if is the first time they connect from that an email is sent to the user for allow the log in. But maybe here there are another problem in this case, Webuzo email are not always delivered if they looks like SPAM... so don't know maybe is better a system like Google Authenticator or just the possibility to ban an IP only in the webuzo admin access area and not to all website of the server.. should be more option under ban IP. Should be a possibility to add custom message for single IP BAN or multipe range IP BAN, should be added if ban an IP from the full server or just in one website or Webuzo log in area. Should be added a possibility to receive an email notification when an admin logged in. Just suggestions for security. What happen if, as in my case, I ban an hacker IP and this is redirected to webuzo default page where Hacker can now know user are with Webuzo control panel and also know where the log in form is because is showed in that page how to log in in the admin panel. That Hacker from scanning in the wordpress website and try to do bad action... now as is Banned see the Webuzo Default page who tell also how to access where access in the Webuzo admin area. Sure Hacker don't have the password but can set a robot for try all username an password (Brute force log in) ... So user will not know there are robot who try day and night to guess password. How Webuzo manage this case? With and what security control are done? Also if Hacker is able to log in no email notification is send so Hacker can do what it want. Tomorrow if notification will be added... If I can log in in the admin Webuzo panel and want expire all session of admin connected (Hacker) if just change password Hacker from another PC will be logged out or can continue to do dangerous actions? This is security
IP: --

Users viewing this topic
	1 guests, 0 users.