quantumJLBass/WSUMAGE-networksecurities

Admin locked out from back and front

Closed this issue · 0 comments

Issue: Admin user typos with in limit, and is blacklisted then looks to the front and is block there as well. It's a issue when they are presenting or trying to do QA, and it's not really a security issue to let them see the front end

Solution set:

  • add column admin_attempt to wsu_failedlogin_log
  • When routing due to black list, first check if it is the admin area, and if the IP being blocked is marked as admin_attempt then complete the route to the black list template.