More Secure Login
| 开发者 | juliobox |
|---|---|
| 更新时间 | 2012年10月30日 23:08 |
| 捐献地址: | 去捐款 |
| PHP版本: | 2.8 及以上 |
| WordPress版本: | 3.3.2 |
详情介绍:
- PLEASE CHECK YOUR EMAIL SETTINGS IN YOUR PROFILE BEFORE LOGOUT THE FIRST TIME AND WAIT FOR THE MAIL CONTAINING THE SECURE CARD. THANK YOU -
- A new field is added below the password one.
- It requires a new code, this code is on a "MSL Secure Card" (png or html table).
- This card contains 64 codes, each code contains 4 chars. You have to print it!
- Now when someone wants to log on any account, even if he knows the password, he can not use it without the code.
安装:
- Upload the "baw-more-secure-login" to the "/wp-content/plugins/" directory
- Activate the plugin through the "Plugins" menu in WordPress
- You'll receive by email your MSL Secure Card.
- All users have to ask for a password reset to get their own MSL Secure Card
- You (the person whom activating the plugin or any other admin) can renew any user's card with users bulk actions.
屏幕截图:
常见问题:
Why this is more secure ?
This kind of authencation is called "Strong Authentication", strong authentication is associated with at least two-factor authentication. Your usual password is the first and only factor, this plugin adds an external factor : a MSL Secure Card. Now, you have 2 secure factors to log in.
How does this works?
When someone wants to log in any account, he has to fill the username, password and now a "MSL Code" field. This code is printed on a card (you have to print it) and contains a code from A1 to H8. Without this code, he can not log in!
Who needs it?
Every blog which needs to improve its login's security.
Need more help?
Read http://baw.li/mslhelp/help-en.html (fr: http://baw.li/mslhelp/help-fr.html) to get more functionnality details.
Dev question: What are the hooks?
更新日志:
1.0.4
- 30 oct 2012
- Bug fix, a path was printed over the "powered by", my bad!
- 07 jun 2012
- PLEASE CHECK YOUR EMAIL SETTINGS IN YOUR PROFILE BEFORE LOGOUT THE FIRST TIME AND WAIT FOR THE MAIL CONTAINING THE SECURE CARD. THANK YOU
- 23 may 2012
- Externalize Help files
- Change the data/base64 image url into a real PNG image
- 25 mar 2012
- Fixing a possible bug when current_time('mysql') returns a bad date :/
- 06 feb 2012
- First release
- A "Pro" version is already under construction, here comes some improvments:
- Option page
- Anti brute-force
- Limit login attempts
- Send self-email when someone logs into your account
- Force the disconnection and password reset for your account in case of threat
- Add the possibility to change the code length
- Force your users to set strong passwords
- Detect low passwords strenght
- Forbid double login
- Forbid users to manually change their password, ask for reset instead.
- Add the possibility to personnalize the picture output
- More hooks
- ...