Protection of the admin board from bruteforce

[terranetpro]

Hi, all.

How i can to block admin panel after 3 wrong login attempt?

Thanks.

[Scully]

Even better: use .htaccess file and only allow your IP or IP range access to the backoffice.

Or look if there is an existing module which allows what you are searching for. From PrestaShop default, there is no such option.

[terranetpro]

Thanks, i will take a look.

Do you know some of them?

[Scully]

We don't use modules for this because a new or unknown modul might also be a possible source of vlunerability. We only use .htaccess since this method is proven, failsafe and blocks unwanted visitors before any action or database connection is made.

[terranetpro]

This is good, but if i use my admin panel from different places?

[Scully]

Your different placed should still have identifiable IP ranges. htaccess is not limited to only one IP, actually it can handle as may addresses or ranges as you like.

Edited October 2, 2017 by Scully (see edit history)

[terranetpro]

Ok, Thanks,

i will use your recommendations.