[wp-trac] [WordPress Trac] #24193: Anti brute force protection

[WordPress Trac]

#24193: Anti brute force protection
-------------------------+------------------------------
 Reporter:  MAzZY        |       Owner:
     Type:  enhancement  |      Status:  reopened
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  Users        |     Version:  3.5.1
 Severity:  normal       |  Resolution:
 Keywords:  has-patch    |     Focuses:
-------------------------+------------------------------

Comment (by ericlewis):

 attachment:24193.2.diff is a working prototype.

 Store a captcha image in `wp-includes/images/`, which gets refreshed every
 ten seconds. There's probably a better place for this, as I know some
 folks lock down permissions on core folders.

 Store an md5 hash of the captcha phrase as a site option. When a user is
 throttled, show the captcha image, an input field, and a hidden input with
 the md5 captcha to compare their input against.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/24193#comment:21>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform