[PHP] Limit failed logins attempts

2010-08-09 Thread Juan Rodriguez Monti
Hi guys, I would like to know what do you suggest to implement a limit for failed login attempts. I thought that might be a good idea, to define a session variable called ( failedattempts ), then check and if $failedattempts is greater than, suppose, 4 write to a Database ( ip, username and

Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Peter Lind
On 9 August 2010 14:30, Juan Rodriguez Monti j...@rodriguezmonti.com.ar wrote: Hi guys, I would like to know what do you suggest to implement a limit for failed login attempts. I use velocity control (or whatever it is called). After the first failed attempt, set a ban-period before another

Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Richard Quadling
On 9 August 2010 13:30, Juan Rodriguez Monti j...@rodriguezmonti.com.ar wrote: I thought that might be a good idea, to define a session variable called ( failedattempts ), then check and if $failedattempts is greater than, suppose, 4 ... As sessions are connected to a request through a session

RE: [PHP] Limit failed logins attempts

2010-08-09 Thread Bob McConnell
From: Juan Rodriguez Monti I would like to know what do you suggest to implement a limit for failed login attempts. I thought that might be a good idea, to define a session variable called ( failedattempts ), then check and if $failedattempts is greater than, suppose, 4 write to a Database

Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Richard Quadling
On 9 August 2010 14:04, Juan Rodriguez Monti j...@rodriguezmonti.com.ar wrote: 2010/8/9 Richard Quadling rquadl...@gmail.com: On 9 August 2010 13:30, Juan Rodriguez Monti j...@rodriguezmonti.com.ar wrote: I thought that might be a good idea, to define a session variable called (

Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Peter Lind
On 9 August 2010 15:10, Richard Quadling rquadl...@gmail.com wrote: On 9 August 2010 14:04, Juan Rodriguez Monti j...@rodriguezmonti.com.ar wrote: 2010/8/9 Richard Quadling rquadl...@gmail.com: On 9 August 2010 13:30, Juan Rodriguez Monti j...@rodriguezmonti.com.ar wrote: I thought that