{"action":"closed","issue":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/7454","labels_url":"https://api.github.com/repos/joomla/joomla-cms/issues/7454/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-cms/issues/7454/comments","events_url":"https://api.github.com/repos/joomla/joomla-cms/issues/7454/events","html_url":"https://github.com/joomla/joomla-cms/issues/7454","id":95628779,"number":7454,"title":"Joomla does not prevent Brute Force Attacks by default","user":{"login":"RichardEb","id":12056060,"avatar_url":"https://avatars.githubusercontent.com/u/12056060?v=3","gravatar_id":"","url":"https://api.github.com/users/RichardEb","html_url":"https://github.com/RichardEb","followers_url":"https://api.github.com/users/RichardEb/followers","following_url":"https://api.github.com/users/RichardEb/following{/other_user}","gists_url":"https://api.github.com/users/RichardEb/gists{/gist_id}","starred_url":"https://api.github.com/users/RichardEb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RichardEb/subscriptions","organizations_url":"https://api.github.com/users/RichardEb/orgs","repos_url":"https://api.github.com/users/RichardEb/repos","events_url":"https://api.github.com/users/RichardEb/events{/privacy}","received_events_url":"https://api.github.com/users/RichardEb/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/joomla/joomla-cms/labels/No%20Code%20Attached%20Yet","name":"No Code Attached Yet","color":"ededed"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":49,"created_at":"2015-07-17T10:15:57Z","updated_at":"2015-07-28T11:07:32Z","closed_at":"2015-07-28T11:07:32Z","body":"Joomla does not prevent Brute Force Attacks by default. If you want to have brute force protection in Joomla you have to install a third party app.\r\n\r\nWhy is such a basic security feature not implemented by joomla itself? I think thats a must have for any modern software.\r\n\r\nI think a normal webdamin will rely on the \"out of the box\" security from joomla. But this security is not guaranteed if brute force attacks aren't blocked"}}