Database
The module's two tables
| Table | Contents |
|---|---|
fa_sc_used_token | Fingerprints of consumed tokens and their expiry date. Purgeable from the back office. |
fa_sc_attempt | Failed attempts: reason, IP address fingerprint, date. Feeds the statistics and the rate limiting. |
IP addresses are not stored in the clear. Only a fingerprint is kept, for the length of the limiting window: enough to hold off a persistent bot, not enough to reconstruct a visitor's browsing.