Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Peter Lind
On 9 August 2010 15:10, Richard Quadling wrote: > On 9 August 2010 14:04, Juan Rodriguez Monti > wrote: >> 2010/8/9 Richard Quadling : >>> On 9 August 2010 13:30, Juan Rodriguez Monti >>> wrote: I thought that might be a good idea, to define a session variable called ( failedattempts

Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Richard Quadling
On 9 August 2010 14:04, Juan Rodriguez Monti wrote: > 2010/8/9 Richard Quadling : >> On 9 August 2010 13:30, Juan Rodriguez Monti >> wrote: >>> I thought that might be a good idea, to define a session variable >>> called ( failedattempts ), then check and if $failedattempts is >>> greater than,

RE: [PHP] Limit failed logins attempts

2010-08-09 Thread Bob McConnell
From: Juan Rodriguez Monti > I would like to know what do you suggest to implement a limit for > failed login attempts. > > I thought that might be a good idea, to define a session variable > called ( failedattempts ), then check and if $failedattempts is > greater than, suppose, 4 write to a Dat

Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Richard Quadling
On 9 August 2010 13:30, Juan Rodriguez Monti wrote: > I thought that might be a good idea, to define a session variable > called ( failedattempts ), then check and if $failedattempts is > greater than, suppose, 4 ... As sessions are connected to a request through a session cookie, putting the fai

Re: [PHP] Limit failed logins attempts

2010-08-09 Thread Peter Lind
On 9 August 2010 14:30, Juan Rodriguez Monti wrote: > Hi guys, > I would like to know what do you suggest to implement a limit for > failed login attempts. I use velocity control (or whatever it is called). After the first failed attempt, set a ban-period before another login is possible for the

[PHP] Limit failed logins attempts

2010-08-09 Thread Juan Rodriguez Monti
Hi guys, I would like to know what do you suggest to implement a limit for failed login attempts. I thought that might be a good idea, to define a session variable called ( failedattempts ), then check and if $failedattempts is greater than, suppose, 4 write to a Database ( ip, username and last-t