If a hack can gain access to the server or database, you will be in trouble.
Force all users to login with an SSH key. There is no way to brute force an SSH key.
Example.
key1.drupaladmin.net
key2.drupaladmin.net
ssh root@key1.drupaladmin.net
cd ~/.ssh/
ssh-keygen -t rsa
cat id_rsa.pub
(copy results of cat)
pico authorized_keys
(scroll to bottom and paste id.rsa.pub FROM OTHER SERVER)
----
ssh root@key2.drupaladmin.net
cd ~/.ssh/
ssh-keygen -t rsa
cat id_rsa.pub
(copy results of cat)
pico authorized_keys
(scroll to bottom and paste id.rsa.pub FROM OTHER SERVER)
