On Fri, Jul 3, 2009 at 4:00 AM, Victor<[email protected]> wrote:
>
> Hi,
> How can I limit time of failed login attempt in specific period with
> TurboGears2? For example, If a ip got 10 time failed attempt within an
> hour, the system will ban the ip for whatever hours I like, how can I
> achieve this with TG2?
>

You could probably keep track of the ip address in some logging table,
and modify the login page to check the ip address for failed logins
before it trys to login the person.

some logging table:
ip address
failed attempts
last attempt
lock expires

Lucas

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/turbogears?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to