Password abuse protection
 

Don't want to use pennywize anymore... is strongbox the best choice?

I use Phantom Frog they know their stuff and are GREAT!
http://phantomfrog.com

You will be glad you use Phantom Frog

If you only have one site strongbox is sufficient, or if you want to protect your entire server use www.proxypass.com

well i have great luck with Phantom Frog. The owner will guide you 100% through everything.

Phantom Frog FTW

Good luck

I've been happy with StrongBox and Ray's support for years.

It deals with problems and then lets you know what it did.

support A T bettercgi.com

I don't know whether Stronbox is the best because I don't have any experience with the others but they have worked so well for me, I came here to post something nice about them. I found your thread.
We were total newbies two years ago and they were very understanding and explained a lot and even got on the phone because email wasn't cutting it. We use their reports page all of the time. Brute force attacks and password sharing are blocked on a regular basis. I don't know why people try to steal from a little hobby site like mine :( but Strongbox stops them.
Thanks Strongbox.
Piper

Another vote for Strongbox.

Have had strongbox protecting the members areas the past few years and very satisfied with it. Thumbs up to Ray

strongbox: best ever
http://www.bettercgi.com/strongbox/

Thanks for your comments TisMe and gloryholeprincess. It's good to know that all of the
work we constantly put into R&D and customer support is useful to you. Jim, if you have any
questions or anything you'd like to discuss just give us a call at 979-530-1300 or ICQ 7208627 .

Been using Strongbox for about 8 or 9 years now and it rocks :thumbsup

Also been using StrongBox for many years great program, great support, highly recommended.

Use a form authentification.
Ip Ban after 3 unsuccessful attempts (10 minutes)
Autogenerate users's passwords and write somewhere this information on your join page.
a good captcha (kcaptcha is pretty good for me)
No captcha with an unmodified charset (if chameleon submitter could autofill the captcha, then it is also a weak captcha for brute force tools).

If you are a php/mysql coder, you can do it yourself.

Strongbox :2 cents: