IPS 4.6 建议只允许电子邮件地址登录

新安装的IPS 4.6默认只能用电子邮件地址登录论坛  (可在后台修改)

允许用户名登录可能代表论坛的一个安全弱点，因为用户名是公开信息，

恶意用户可能尝试使用常用密码登录多个帐户，直到他们找到一个能用的密码。

建议你只允许电子邮件地址登录。

Allowing users to log in with a display name can represent a security weakness for your community because display names are public information and malicious users may attempt to login to multiple accounts with common passwords until they find an account for which the passwords work. It is recommended that you only allow users to log in with their email address.

本帖最后于2021年5月29日3年前，由Jack编辑