Brute Force Protection

What is a Brute Force Attack?

This kind of attack consists of an attacker trying many passwords or passphrases with the hope of eventually guessing correctly -Wiki.

How does this work?

Koblog provides brute force protection to mitigate this kind of attack, and this protection is enabled by default.

For each failure to log in, Koblog adds the IP of the user who failed to authenticate to a blacklist. When the user fails a certain number of times, Koblog blocks the offending IP for a period of time, and the user can't log in until the block has expired.

Class and Object

There is a Security Object called $security, and the class of the object is /bl-kernel/security.class.php. Take a look at the variables inside the class.

private $dbFields = array(
    'minutesBlocked'=>5,
    'numberFailuresAllowed'=>10,
    'blackList'=>array()
);

• minutesBlocked: Amount of minutes the IP is going to be blocked.
• numberFailuresAllowed: Number of failed attempts for the block to trigger.
• blackList: The list of IPs blocked.