You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Florian Eisenmenger
41ccc32b5d
|
преди 2 години | |
|---|---|---|
| .. | ||
| Api/Data | преди 2 години | |
| Block | преди 2 години | |
| Controller/Adminhtml/Session | преди 2 години | |
| Model | преди 2 години | |
| Observer | преди 2 години | |
| Setup/Patch/Data | преди 2 години | |
| Test | преди 2 години | |
| etc | преди 2 години | |
| i18n | преди 2 години | |
| view | преди 2 години | |
| LICENSE.txt | преди 2 години | |
| LICENSE_AFL.txt | преди 2 години | |
| README.md | преди 2 години | |
| composer.json | преди 2 години | |
| registration.php | преди 2 години | |
README.md
Security
Security management module Main features:
- Added support for simultaneous admin user logins with ability to enable/disable the feature, review and disconnect the list of current logged in sessions
- Added password complexity configuration
- Enhanced security to prevent account takeover for sessions opened on public computers and similar:
- Password confirmation for all critical flows (like password, email change)
- Lockout of the account after a configurable amount of incorrect login/password entries
- Password Change functionality is enhanced by email and/or ip address by frequency, number and requests per hour limitation
- Change password link becomes invalid after the first use or after a configurable amount of time
- Password/email change notifications are sent to both old and new email addresses
- Fixed: the password is not being reset until the new password is submitted via the form available by a one time link sent to the email address