Authen_DAP (dictionary)

Name:	Authen_DAP Support forum
Base name:	`authen_dap`
Description:	Slow down attempts to guess login passwords
Related top rated classes:	dictionary
Version:	`-`
Required PHP version:	`-`
License:	GNU Lesser General Public License (LGPL)
All time users:	1319 users
All time rank:	1997
Week users:	2 users
Week rank:	2469

	Author		Groups		Detailed description

	User ratings		Dependencies		Applications		Files

Author

Name:	Craig Manley `<e-mail contact>`
Published packages:	5 Browse this author's classes
Country:	The Netherlands - PHP jobs in The Netherlands
Home page:	???
Age:	???
All time rank:	187
Week rank:	435

Innovation Award

January 2005
Number 6

One the types of attacks to breach the security of systems is to attempt to guess the access passwords of the system users.

Usually, the attacker resorts to dictionaries of common passwords that users tend to use, and try them all until one succeeds. This brute force attack method is usually known as dictionary attack.

This class provides a solution to protect against dictionary attacks a site that require the users to authenticate to have access to restricted pages.

It keeps track of login attempts to the same account, disabling access to that account for a given period after a few consecutive failed attempts.

This way, dictionary attack attempts are discouraged as they may take a very very long to be successful.

Manuel Lemos

Groups

	User Management	User records, authentication and session handling	View top rated classes
	Security	Security protection and attack detection	View top rated classes

Detailed description

This offers protection against automated attempts to guess login passwords also known as dictionary attacks.

It works by logging failed access attempts and when necessary it blocks the access to users that have failed to login too many times, as it may be an attack of a cracker using a dictionary of common passwords trying guess the correct password with an automated script.

The class uses a shared memory storage access class to keep track of the failed login attempts of each user.

User ratings

There are not enough user ratings to display for this class.

Packages needed by this class

Class	Dependency	Why it is needed
IPC Shared Memory	Required	for shared memory

Applications that use this class

No application links were specified for this class.

If you know an application of this package, send a message to the author to add a link here.

Files

File	Role	Description
`DAP.php`	Class	The main class, based on an existing Perl class of mine.
`README.TXT`	Data	Instructions
`tdap.php`	Example	Example/test script for Authen_DAP.

Download all files: authen_dap.tar.gz authen_dap.zip
NOTICE: if you are using a download manager program like 'GetRight', please Login before trying to download this archive.

Copyright (c) Icontem 1999-2009	PHP Classes	- PHP Class Scripts
	PHP Book Reviews	- Reviews of books and other products

Class: Authen_DAP