owen/lms
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed missing check + typo

Browse Source
This commit is contained in:
emeric
2021-06-07 12:52:21 +02:00
parent 1022ef0219
commit 3c51beb1f5
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -78,7 +78,7 @@ $setmulti(albumartistssort,%_albumartists_sort%)
* Next track: <kbd>Ctrl</kbd> + <kbd>Right</kbd>
## Security considerations
_Wt_ (the web framework used) has some [built-in security mesures](https://www.webtoolkit.eu/wt/features#security), but _LMS_ also has some too:
_Wt_ (the web framework used) has some [built-in security measures](https://www.webtoolkit.eu/wt/features#security), but _LMS_ also has some too:
* to mitigate brute force login attempts, _LMS_ uses an internal login throttler based on the client IP address. The `Client-IP` or `X-Forwarded-For` headers are used to determined the real IP adress, so make sure to properly configure your reverse proxy to filter or even erase the values (see example in [INSTALL.md](INSTALL.md)).
* all passwords are stored hashed and salted using [bcrypt](https://fr.wikipedia.org/wiki/Bcrypt)
* all the resources relative to the music collection (tracks, covers, etc.) are private to a session