Jump to content

IPS 4.6 建议只允许电子邮件地址登录


Jack
 Share

Recommended Posts

Posted (edited)

新安装的IPS 4.6默认只能用电子邮件地址登录论坛  (可在后台修改)


允许用户名登录可能代表论坛的一个安全弱点,因为用户名是公开信息,

恶意用户可能尝试使用常用密码登录多个帐户,直到他们找到一个能用的密码。

建议你只允许电子邮件地址登录。

Allowing users to log in with a display name can represent a security weakness for your community because display names are public information and malicious users may attempt to login to multiple accounts with common passwords until they find an account for which the passwords work. It is recommended that you only allow users to log in with their email address.

Edited by Jack
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...