strongbox support was great for me
 

FYI, I have to say with the threads about poor strongbox support had me worried.

But, I contacted them a few hours ago and they responded and fixed my issue within a few hours after the ticket was created. Great job strongbox.

so are they still alive? :thumbsup

That's great! Ray @ strongbox was always good people. Maybe there was a bump in the road with staffing or something.

great thread & yes, Ray & strong box are & is amazing.

Always worked well for our sites on our server for many years! :thumbsup

Good to know :thumbsup!

Strongbox coding is 10 years behind (at least)

I can't comment on the quality of their coding, but I do feel like BetterCGI as a whole has been on auto-pilot for some years now. Clicking on Strongbox on their site now forwards to: https://www.comglobalit.com/en/strongbox/ (which doesn't even appear to be linked on that site's main page!) so it looks like it's now a project Elias is running on his own.

We used all three of their services in the past and although nothing ever broke thankfully, towards the end of our time using them, support was oftentimes slow to respond. CloneBox not backing up for a few weeks and waiting days for support to fix that was the straw that broke the camel's back which led to us cutting our ties.

I think a competent programmer could emulate what Strongbox does. That combined with being diligent by checking your site's access logs a few times a day can put a dent in unauthorized logins. :2 cents:

but still works perfectly.


Nothing get´s through as it works on IP, asap to another IP and country use, the who network shuts down & login says, please email support for new password. Only the real holder can do this, it´s amazing :thumbsup

I agree that it works well but I'm not sure if 'still' is best used in a sentence describing security software used to keep your safe site.

What I didn't like about Strongbox (and overall Strongbox is good and these are just minor grumbles):

*IP addressees weren't full. last 3 digits were cut off on the raw access logs (why???).
*No easy way to export IP's. This is useful if you were ever brute forced and wanted to quickly add dozens+ IP addresses to your firewall.
*No full access logs. You could tell if a person logged in fine, but you couldn't see what they were doing unless you also had Throttlebox and even then you'd have to log into another admin panel and the if you think Strongbox is out of date...
*No brute force throttle delay (at least I don't think it has this feature though I may be wrong).
*Users HATED the 'choose 4 or 5 faces' login test. Elias made an 'afterfail' upgrade that got rid of it, but I don't recall if that was something they were officially rolling out or was just an 'ask for it if you want it' type deal.

No, Gary, it works like shit.

I guess it's fine for your website with 100 visitors per day, but it's totally not suitable for a proper paysite. We took the original code and re-worked it from the ground up (since there is virtually no support or development).

One among many other things we had re-coded.

It's just outdated as hell.

I had something done like this too.

The security/accounts part of our back-end is pretty much everything I liked about Strongbox plus fixing the points I made above done with modern coding and a modern interface.

ya, they were great back in 06' but it's true it's the same software as it was back then, and for security that is shit.

StrongBox and Password Sentry have always been great. Glad to see SB could help you.