Forum

Hi Hugo,

Can I put a limit for the authentication? For example, exile if 3 wrong inputs.
And can I use with the password more than 8 signs?

Hiawatha version: 7.4
Operating System: Debian 5

You could take a look at the BanOnWrongPassword option. If you want to use more than 8 characters, you should use Digest HTTP authentication instead of Basic HTTP authentication.

I give more than 3 wrong inputs but I am not banned
And I dont understand how to create .passwords file for Digest.

You can use Apache's htdigest tool to create password for Digest HTTP authentication.

I test the banning on wrong passwords soon.