[Zope] scary security questions

Graham Chiu anon_emouse@hotmail.com
Fri, 12 May 2000 12:21:26 +1300


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In article <20000511215531.15698.qmail@web701.mail.yahoo.com>, Paul
Abrams <paulabrams@yahoo.com> writes
>1) What prevents someone from getting into the manage
>screens by cracking the admin username:password? Are failed
>login attempts logged anywhere? If not, is there any way to
>log them short of hacking the zope python code?

I think you can restrict access by IP address.

- -- 
Regards,        Graham Chiu
gchiu<at>compkarori.co.nz
http://www.compkarori.com/dynamo - The Homebuilt Dynamo
http://www.compkarori.com/dbase - The dBase bulletin

-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1

iQA/AwUBORqlx7TRdIWzaLpMEQIG3wCfREaJYSFT50jATjOVHN/cOns0xMAAnAlT
FEkqKy2us7J3sdAVNl8/c+LN
=WPrF
-----END PGP SIGNATURE-----