> Cookies are simple and easy to use, and I would say for the 
> purpose of this effective.
> 

erm, for what purpose exactly?  I mean, this is supposed to be some sort of 
'security' tactic and you're going to let the CLIENT tell you when it thinks 
it's waited long enough?

Point taken about the releasing the IP BUT this is generally more involved no?  
It WILL block an office building but what do you want, secure?  It is much 
harder to get new PUBLIC addresses than deleting cookies.

- James




> -----Original Message-----
> From: Steve Onnis [mailto:[EMAIL PROTECTED]
> Sent: Monday, 17 January 2005 12:25 PM
> To: CFAussie Mailing List
> Subject: [cfaussie] RE: Cookies anyone?
> 
> 
> And if someone is behind a LAN or an office environment, your 
> going to block the whole building unless you can get the machines
> local IP address, and even then I would have a guess that 
> nearly all offices would be running DHCP, so all they would need to do
> would be to do a ipconfig /renew and get a new IP address 
> from the DHCP server.
> 
> Cookies are simple and easy to use, and I would say for the 
> purpose of this effective.
> 
> Steve
> 
> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf 
> Of James Macpherson
> Sent: Monday, January 17, 2005 12:21 PM
> To: CFAussie Mailing List
> Subject: [cfaussie] RE: Cookies anyone?
> 
> Hello,
> 
> I'd say that an IP address is more reliable than the cookie 
> (the cookie is clientside and easily cleared by someone who 
> is trying to
> get in)
> 
> - J
> 
> > -----Original Message-----
> > From: Sameer Kekade [mailto:[EMAIL PROTECTED]
> > Sent: Monday, 17 January 2005 12:08 PM
> > To: CFAussie Mailing List
> > Subject: [cfaussie] Cookies anyone?
> > Importance: High
> > 
> > 
> > Hey all,
> > 
> > Is there any way to make a cookie expire after 30 minutes?
> > 
> > I want to prevent the user from logging into the website 
> > after x number
> > of failed attempts for at least 30 mins on that machine. 
> > 
> > Does any body know how to achieve this?? 
> > 
> > Another approach could be logging and blocking by the IP ADDRESS of
> > client machine, but I think this is a bit unreliable since an 
> > IP address
> > could be shared for different machines.
> > 
> > Warm Regards,
> > Sameer S. Kekade.
> > 
> > 
> > ---
> > You are currently subscribed to cfaussie as: 
> > [EMAIL PROTECTED]
> > To unsubscribe send a blank email to 
> > [EMAIL PROTECTED]
> > Aussie Macromedia Developers: http://lists.daemon.com.au/
> > 
> 
> ---
> You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
> To unsubscribe send a blank email to 
> [EMAIL PROTECTED]
> Aussie Macromedia Developers: http://lists.daemon.com.au/
> 
> 
> ---
> You are currently subscribed to cfaussie as: 
> [EMAIL PROTECTED]
> To unsubscribe send a blank email to 
> [EMAIL PROTECTED]
> Aussie Macromedia Developers: http://lists.daemon.com.au/
> 

---
You are currently subscribed to cfaussie as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/

Reply via email to