Login Security For Accounts
🛡️ Overview
CONNECT SRMAP protects your account with multiple layers of authentication, session management, and access controls. Only the account owner with valid credentials can log in.
🔑 Account Password
Your password is the primary credential. The system verifies it against the stored hash. Never share it, and CONNECT SRMAP support will never ask for it.
🖥️ Session Security
After login, a session cookie is created with HttpOnly and SameSite flags. The session ID is regenerated immediately to mitigate session‑fixation attacks.
⚠️ Failed Login Protection
CONNECT SRMAP tracks failed attempts. After five consecutive failures, the account locks for five minutes. Once the lock expires, you can try again.
🌐 IP‑Based Login Protection
Repeated failures from the same IP can trigger temporary protection, adding an extra safeguard against automated attacks.
📧 Email Verification
New accounts must verify their email before they can log in. Keep your email account secure and never share the verification code.
🚫 Account Status Checks
Login is blocked if the account is:
- Under maintenance
- Suspended
- Not email verified
- Temporarily locked due to failed attempts
- Restricted from login
- Within a post‑deletion waiting period
🎓 Alumni Account Restriction
Alumni Student accounts cannot use the standard CONNECT SRMAP login system.
📊 Login History
Successful logins are recorded with:
- Register Number
- Student Name
- Login Time
- Online Status
- IP Address
- Country, Region, City
- Device Information
📍 Location Information
IP addresses provide approximate location data (country, region, city). This is not an exact physical location.
🔒 Protected Page Security
Pages that require authentication redirect unauthenticated users to a Login Required page. The original destination is preserved so you return after logging in.
🔗 Safe Redirect Protection
Redirects are validated to allow only internal paths. External URLs and unsafe formats are rejected to prevent open‑redirect attacks.
🗝️ Account Remembering
Login pages can store credentials in browser cookies for convenience. Do not use this feature on shared or public computers.
🛡️ Browser Security
The login pages employ:
- HttpOnly session cookies
- SameSite cookie protection
- X‑Frame‑Options protection
- X‑Content‑Type‑Options protection
- Referrer Policy controls
💡 Keep Your Account Safe
- Use a strong, unique password.
- Never reuse your CONNECT SRMAP password on untrusted sites.
- Never send passwords via chat.
- Never share email verification or recovery codes.
- Log out when using a shared computer.
- Secure your registered email account.
🚨 If You Suspect Unauthorized Access
- Change your password immediately.
- Secure your email account.
- Avoid sharing credentials.
- Contact CONNECT SRMAP Support for help.
⚠️ Important
Security features protect your account, but you must also safeguard your credentials. Never disclose passwords, verification codes, or recovery information.
🏫 Independent Platform Notice
CONNECT SRMAP is a student‑built platform and is not affiliated with SRM University, Andhra Pradesh. Information displayed is for convenience only and should not be considered official university communication.
📞 Need Help?
Email: connectsrmap@purlyedit.in
Help Center: https://oursrmap.purlyedit.in/chat_profile/HELP_CENTER