Login Timer

Normalize successful and failed login times to prevent timing attacks.

 Download  GitHub

Login Timer for ProcessWire

Prevents timing attacks by enabling normalization of login times so that a failed login is no faster than a successful login.

This prevents timing attacks from discovering any information about good vs. bad user names or passwords based on the time taken to process the login request. It does this by remembering how long successful logins take and applying that same amount of time to failed logins.

Please see the post with Details and documentation for this module.

Installation

  1. Copy all files from this module to /site/modules/LoginTimer/
  2. Go to Modules > Refresh in your admin.
  3. Install the Site > Login > Login Timer module.
  4. Logout and log back in.

The last step above will prime the login timer so that it can establish an appropriate login time for your system. This time is recalculated up to 24 times per day.

Once installed, this module will automatically apply to all logins from ProcessWire’s $session API variable. For instance, logins from the ProcessWire login form, and the LoginRegisterPro module are covered by this module.

More modules by Ryan Cramer

  • Hanna Code

    Easily insert any complex HTML, Javascript or PHP output in your ProcessWire content by creating your own Hanna code tags.
    TextformatterHannaCode by Ryan Cramer

  • Form Builder PRO

    Building front-end forms on your website has never been so simple. ProcessWire Form Builder lets you create, edit and publish forms with no development necessary.
    FormBuilder by Ryan Cramer

  • ProCache PRO

    ProCache provides the ultimate performance for your website by completely bypassing PHP and MySQL and enabling your web server to deliver pages of your ProcessWire site as if they were static HTML…
    ProCache by Ryan Cramer

  • ProcessWire Upgrade

    Tool that helps you identify and install core and module upgrades.
    ProcessWireUpgrade by Ryan Cramer

  • Site Profile Exporter

    Enables exporting of ProcessWire site profiles for sharing or distribution with others.
    ProcessExportProfile by Ryan Cramer

  • Map Marker (Google Maps)

    This Fieldtype for ProcessWire 2.1+ holds an address or location name, and automatically geocodes the address to latitude/longitude using Google Maps API.
    FieldtypeMapMarker by Ryan Cramer

  • Video embed for YouTube/Vimeo

    Enables translation of YouTube or Vimeo URLs to full embed codes, resulting in a viewable video in textarea fields you apply it to. Now with support for responsive videos too.
    TextformatterVideoEmbed by Ryan Cramer

  • Import Pages from CSV files

    Enables you to import CSV files to create pages.
    ImportPagesCSV by Ryan Cramer

  • Database Backups

    Create and/or restore database backups from the ProcessWire admin.
    ProcessDatabaseBackups by Ryan Cramer

All modules by Ryan Cramer

Install and use modules at your own risk. Always have a site and database backup before installing new modules.