Subsonic Forum

Increase the logging to subsonic.log so It includes users logged in and failed tries with ip.

As techsc writes in this post: http://forum.subsonic.org/forum/viewtopic.php?t=2944
Security Policies should be implemented.

yes please can we limit the number of times someone can fail logging in. I don't want people/bots to just hammer away at the login page until the manage to hit on the correct password.

Thanks for considering this!

Is there any plans of upgrading the security of subsoic?

http://en.wikipedia.org/wiki/Spring_Security

At present state it don't seem to log anything.