|
Integrated is better if done right. It should have
* Captchas
* IP Blocking
* User lockout
* Delay on auth-failure.
* Slurp protection
* Encrypted password storage (multi-round Hash + Salt, or bcrypt)
And other security things.
You have those things? Great. You don't? Get something third party.
Don't fuck around wth login security.
__________________
<?= base64_decode("aHR0cDovL211dGhpc2Rldi5jb20v") ?>
|