登录接口安全评审
让模型审查常见登录接口安全缺陷。
Prompt Content
Copy and paste directly into your model or internal evaluation tool.
一个登录接口返回“用户不存在”和“密码错误”两种不同错误，并且失败 10 次后才锁定账号。请从攻击者视角列出风险，再给出不破坏用户体验的改进方案。
Use Cases
Reference Output
风险包括枚举用户、撞库、锁定滥用。改进包括统一错误、渐进式限流、风险验证、审计和告警。
Scoring Rubric
重点看是否同时考虑安全和体验，而不是只说统一错误。
Try & save
Fill variables and copy, or save as a personal template.
This template has no variables and is ready to copy.
User Rating
0 ratingsYour rating
Log in to rate
Comments
0Log in to comment
Related Prompts
MQL5 Flexible Trade Management Pro
Design a powerful MQL5 code for flexible trade management on the chart, capturing profits and eliminating losing trades with precise calculations to protect the account.
Surprise Point-and-Click Game Generator
Ask the model to design or implement a point-and-click game based on AI choices and make the result surprising.
Building an AI to Beat Pro Players in Yu-Gi-Oh
Building an AI that learns a specific deck in Yu-Gi-Oh Master Duel and beats pro players using ygo agent and Kaggle Notebooks.
Code Review Assistant for Error Detection and Improvement
As a code review assistant, focus on identifying errors, inefficiencies, and potential improvements in code, and provide concise feedback.