Settings > Security - the sign-in page (its message, and a login * key agents need in its address), how long two-step sign-in remembers a * device, when admins hear of failed sign-ins, and shared links. Saved by * edit_security_settings (admin/post/settings_security.php). */ require_once "includes/inc_all_admin.php"; // Read here rather than with every page's settings, so a page still opens before the update that adds it $config_login_alert_failures = signInAlertLimit(); $login_url = rtrim('https://' . preg_replace('#^https?://#', '', (string) $config_base_url), '/') . '/login.php?key='; $login_key_shown = (string) settingsValue('config_login_key_secret', $config_login_key_secret); echo settingsPageStart('security'); ?>
3, 'maxlength' => 65000, 'placeholder' => 'Authorised users only', 'help' => 'Shown above the sign-in form - plain text, each new line kept.']) ?> 'Agents sign in only from the address with the key in it.']) ?>
'fa-key', 'maxlength' => 99, 'pattern' => '\w{3,99}', 'title' => '3 to 99 letters, numbers and underscores', 'placeholder' => 'MYSECRET', 'autocomplete' => 'off', 'help' => '3 to 99 letters, numbers and underscores - easy for your agents to remember.']) ?>
Agents sign in at
'fa-clock', 'type' => 'number', 'min' => 1, 'max' => 365, 'required' => true, 'suffix' => 'days', 'help' => 'Each agent can see and forget their remembered browsers in their own Security settings.']) ?> 'fa-bell', 'help' => 'Each admin gets a notification and an email.']) ?> 'fa-hourglass-half', 'help' => 'The longest an agent can pick - a link stops working then, or sooner.']) ?> 'A shared password or secure note opens only with a passphrase the agent gives, or a code emailed to the person it is for.']) ?>