Security Settings
You see your Security Settings, go to Settings >> Global Configuration.
Security Settings is the eighth tab. Under it you will see the following:
alert email address - email address to send security alerts to such as failed logins and debug emails
enable IP restriction to admin area - enable this option to restrict the admin area to specific IPs specified below
admin restrict to IPs - restrict the admin area to specific IP addresses. separate each IP address with a comma
enable auto ip block on submission errors - automatically add the ip to the blocked ip addresses list when submitting forms with errors as specified in the interval below
automatic ip block interval - the number of times someone can submit with errors before being automatically blocked
enable form flood control - only allow users to submit certain forms a total of X times per interval below
flood control interval - the number of times the user can send a downline email in a 24 hour period
block IP addresses - if you want to block certain IP addresses from accessing your site, enter each IP on one line and press ENTER
block free email address registration - enable the free email domain block when registering accounts
block email domains - if you want to disallow registration from certain email domains, such as hotmail.com, enter each email domain on one line here Ex. hotmail.com gmail.com
enable CAPTCHA on comments and reviews - enable CAPTCHA images when filling in product reviews and content comments
enable CAPTCHA on checkout/registration - enable CAPTCHA images on billing and order forms
