Re: locking user out after 3 incorrect attempts to log in

2004-06-16 Thread Christy Carter
Thanks for all the replies, folks! Doug, I looked at that Coldcuts code you mentioned, but I have no clue where in my code to put it!I've tried several things but keep getting errors - VALUE is not a valid parameter, among others.Where would you suggest I place that code?Thank you for your help.

Re: locking user out after 3 incorrect attempts to log in

2004-06-16 Thread Doug James
I would imagine you could do some thing like: On the login.cfm page untestedOffTheTopOfTheHeadCode CFPARAM NAME=client.times_logged_on VALUE=0 CFIF client.times_logged_on gt 3 Sorry too many attempts (or some other more nicely worded message) CFABORT CFELSE CFSET client.times_logged_on =

Re: locking user out after 3 incorrect attempts to log in

2004-06-16 Thread Christy Carter
Okay, I could be wrong because like I said, I'm very new to this - but wouldn't times_logged_on track how many times the user has actually logged in, not just tried to?I've tried to use session.times_logged_on but until the person successfully logs in, there's no actual session variable set. I'm

RE: locking user out after 3 incorrect attempts to log in

2004-06-16 Thread Matt Robertson
Christy Carter wrote: wouldn't times_logged_on track how many times the user has actually logged in, not just tried to? Not if you reset your counter stuff to zero (or delete it or somesuch) after a successful login :-) I wrote a free tag that does this 3-strikes stuff (I use 4 strikes, as I

Re: locking user out after 3 incorrect attempts to log in

2004-06-16 Thread Christy Carter
Thanks, Matt. I did download your code, and am about to wade through it now, although given my lack of CF knowledge, my chances of being able to decipher it are probably slim. :) But thanks for your help anyway. Christy :) [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe]

RE: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread Pascal Peters
: maandag 14 juni 2004 21:36 To: CF-Talk Subject: Re: locking user out after 3 incorrect attempts to log in Christy, Welcome to the wonderful world of CF, speaking for everyone on the list we hope you enjoy it and will stay and even recruit some friends. Regarding you problem, check out

RE: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread Steve Nelson
, 2004 3:24 AM To: CF-Talk Subject: RE: locking user out after 3 incorrect attempts to log in Archive: http://www.houseoffusion.com/lists.cfm/link=i:4:166613 --- I see you are using session vars, so I would recommend session.times_logged_on. But that aside, you have to realize that there is no way

Re: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread G
PROTECTED] Sent: Tuesday, June 15, 2004 3:24 AM To: CF-Talk Subject: RE: locking user out after 3 incorrect attempts to log in Archive: http://www.houseoffusion.com/lists.cfm/link=i:4:166613 --- I see you are using session vars, so I would recommend session.times_logged_on. But that aside, you have

RE: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread Mark W. Breneman
times. Mark W. Breneman -Cold Fusion Developer -Network Administrator Vivid Media [EMAIL PROTECTED] www.vividmedia.com 608.270.9770 _ From: G [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 15, 2004 8:53 AM To: CF-Talk Subject: Re: locking user out after 3 incorrect attempts to log in Archive

RE: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread Matt Robertson
Granted that deleting cookies pretty much zaps session management, but... The trick to making this work right, I think, is making it successfully self-service.A user has to have enough retries to get it thru their thick skull that they forgot their password (I use 4 strikes). The lockout has to

Re: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread Mark Drew
You are right, deleting cookies just makes it go away, otherwise we are into the arena of banning ip addresses and with dynamic IP addresses being used normally that is outta the window! MD [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Re: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread Casey C Cook
As log as it just kicks the user off the login screen I wouldnt mind. What I really dislike is 3 failed attempts and you have to call a helpdesk or send e-mail or whatever to have your account reactivated such that you can try to login again. Casey Cook [Todays Threads] [This Message]

Re: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread G
(lockDuration or something like that). This would allow the account to effectively unlock itself after a given period of time. Brian - Original Message - From: Casey C Cook To: CF-Talk Sent: Tuesday, June 15, 2004 11:48 AM Subject: Re: locking user out after 3 incorrect attempts to log

Re: locking user out after 3 incorrect attempts to log in

2004-06-15 Thread George Abraham
Yeah it is irritating, yet strangely comforting. I just went through that with my bank login. They have some database tracking that keeps an account of the number of times you try to log in. If the process to reactivate wasn't so darned convoluted, it would be an OK experience. George At

Re: locking user out after 3 incorrect attempts to log in

2004-06-14 Thread Doug James
Christy, Welcome to the wonderful world of CF, speaking for everyone on the list we hope you enjoy it and will stay and even recruit some friends. Regarding you problem, check out http://www.teratech.com/coldcuts/cutdetail.cfm?cutid=291 Doug Christy wrote: I'm taking over a CF application