Fork of CCDN User Security Bundle
- Version >= 2.0 will no longer require CCDNUserSecurityBundle
This bundle is for the symfony framework and requires Symfony ~2.4 and PHP >=5.3.2
This project uses Doctrine >=2.1 and so does not require any specific database.
Use this bundle to mitigate brute force dictionary attacks on your sites. Excessive failed logins will force users to recover their account, additional attempts to circumvent that will block the user from specified webpages by returning an HTTP 500 response on all specified routes.
This bundle does NOT provide user registration/login/logout etc features. This bundle is for brute force dictionary attack mitigation only. Use this bundle in conjunction with your preferred user bundle.
SecurityBundle Provides the following features:
- Prevent brute force attacks being carried out by limiting number of login attempts:
- When first limit is reached, redirect to an account recovery page.
- When secondary limit is reached, return an HTTP 500 status to block login pages etc.
- All limits are configurable.
- Routes to block are configurable.
- Route for account recovery page is configurable.
- Decoupled from UserBundle specifics. You can use this with any user bundle you like.
- Redirect user to last page they were on upon successful login.
- Redirect user to last page they were on upon successful logout.
Documentation can be found in the
Resources/doc/index.md file in this bundle:
All the installation instructions are located in documentation.
This software is licensed under the MIT license. See the complete license file in the bundle:
Issues and feature requests are tracked in the Github issue tracker.
Back to: rzproject