(may not work - not tested) * Remember me option * IP ban system (if IP differs from session stored one) * Ban system if too many attempts
Phyks