Security

Symfony
Published on 2019-06-05 • Modified on 2019-06-05

In this post we will see how to use the NotCompromisedPassword validator which was introduced in Symfony 4.3. This validator allows us to check if a given password was publicly exposed in a data breach and is therefore compromised. We will see how to use it manually and how to offer the ability to the user to test their password with this validation.

subject Read the full post


Symfony
Published on 2018-11-16 • Modified on 2019-01-06

In this post we will see how to implement a fail2ban like system for Symfony. It will log login failure attempts for a given IP and will prevent further tries once a critical threshold is reached. When happening, a customized error page will be displayed to the user. ⏹

subject Read the full post