discutea/ccdn-user-security-bundle

CCDN User Security Bundle

2.0.4 2014-04-23 22:53 UTC

Requires

• php: >=5.3.3
• doctrine/doctrine-bundle: ~1.2
• doctrine/orm: ~2.2,>=2.2.3
• symfony/symfony: 2.4.*

Requires (Dev)

• behat/behat: 2.5.*@stable
• behat/mink: v1.5.0
• behat/mink-browserkit-driver: *
• behat/mink-extension: *
• behat/mink-goutte-driver: *
• behat/mink-selenium2-driver: *
• behat/symfony2-extension: *
• doctrine/doctrine-fixtures-bundle: dev-master
• friendsofsymfony/user-bundle: ~2.0@dev
• phpunit/phpunit: 3.7.*
• raulfraile/ladybug-bundle: dev-master
• symfony/monolog-bundle: ~2.4
• symfony/swiftmailer-bundle: ~2.3

MIT

• Reece Fowell

• security
• user
• login
• brute force
• dictionary attack
• ccdn
• codeconsortium

README

Notes:

This is no longer supported or worked on. If you wish to continue using this and wish to take over let me know.

This bundle is for the symfony framework and requires Symfony ~2.4 and PHP >=5.3.2

This project uses Doctrine >=2.1 and so does not require any specific database.

This file is part of the CCDNUser bundles(s)

© CCDN © CodeConsortium

Available on:

• Github
• Packagist

For the full copyright and license information, please view the LICENSE file that was distributed with this source code.

Description:

Use this bundle to mitigate brute force dictionary attacks on your sites. Excessive failed logins will force users to recover their account, additional attempts to circumvent that will block the user from specified webpages by returning an HTTP 500 response on all specified routes.

You can use this bundle with any User Bundle you like.

This bundle does NOT provide user registration/login/logout etc features. This bundle is for brute force dictionary attack mitigation only. Use this bundle in conjunction with your preferred user bundle.

Features.

SecurityBundle Provides the following features:

1. Prevent brute force attacks being carried out by limiting number of login attempts:
   1. When first limit is reached, redirect to an account recovery page.
   2. When secondary limit is reached, return an HTTP 500 status to block login pages etc.
2. All limits are configurable.
3. Routes to block are configurable.
4. Route for account recovery page is configurable.
5. Decoupled from UserBundle specifics. You can use this with any user bundle you like.
6. Redirect user to last page they were on upon successful login.
7. Redirect user to last page they were on upon successful logout.

Documentation.

Documentation can be found in the Resources/doc/index.md file in this bundle:

Read the Documentation.

Installation.

All the installation instructions are located in documentation.

License.

This software is licensed under the MIT license. See the complete license file in the bundle:

Resources/meta/LICENSE

Read the License.

About.

CCDNUser SecurityBundle is free software from Code Consortium. See also the list of contributors.

Reporting an issue or feature request.

Issues and feature requests are tracked in the Github issue tracker.

Discussions and debates on the project can be further discussed at Code Consortium.