Hello,

I see at this announcement:

www.limesurvey.org/limesurvey-updates/22...uild-200128-released

it states that "-Fixed issue: [Security] Login attempts brute-force prevention"

so I'm assuming that means any release after 4.1.0 has brute force in place.

But I cannot find any setting anywhere in Version 4.2.1+200428 where "bruteforce" is mentioned as a setting or otherwise.

Does "brute force" in 4.1.0 mean failed attempts at captcha? Or actual bruteforce of tokens?

If someone knows how to use this great feature please do tell.

Thank you.

It most probably relates to the login attempts in the administration rather than at survey taking.

I think you are correct - administrator login attempts, not survey taker login (token) attempts.

Thanks for clearing that up.

Be safe.

github.com/LimeSurvey/LimeSurvey/commit/...cb0be67d829b34b750fa