block the user after 3 attempts

[jithbiz0033]

Hi Guys, I want to block the customer from logging in after 3 continuous attempts.I would like to block them for some duration(eg. 6 hours) so that they will not be able to login during that time period and afterwards the block is released. If anybody have coding or suggestion for my problem. please do reply. Thanks Jith

[eyeseetee]

you could set a string value to count number of times user has attempted and match against current date. Then have if statement along lines of if string value is = 3 and date = current date then error message = You have been restricted for 3 hours etc

[Paddy Boyd]

Why a string value specifically?

[Declan Bright]

Insert all login attempts to a database table which contains username, datetime and login success. As part of the authentication process do a select count for the username where the login success is false for a given time period. If the count is greater than 2 then reject the login and display a nice informative message.

Declan Bright www.declanbright.com

[Paddy Boyd]

Add a couple of fields to your user table in the DB, e.g. NUMBER_FAILED_ATTEMPTS & DATE_OF_LAST_LOGIN. You can then code to increment the number on a failed login attempt and then check if you are blocked where number > 3 and date within 6 hours.

[eyeseetee]

Yes much better suggestion, a database table is probably more secure to display this info, you could also set it up to clear the fields after 6 hours

[Declan Bright]

Hi Paddy I'm getting paranoid, as a fellow irish man I'm afraid you are looking over my shoulder. ;P

Declan Bright www.declanbright.com

[Paddy Boyd]

I am. Don't look round.

[Declan Bright]

:omg: :wtf: :omg: :wtf: :omg:

Declan Bright www.declanbright.com