Re: best way to limit # of attempts to login to protected page?
This WebDNA talk-list message is from
2000
It keeps the original formatting.
numero = 35433
interpreted = N
texte = but then how do you keep people from simply coming in via a manipulated URL w/formvars set the way they want them - and thus getting around that kind of guard?Anup Setty wrote:> The way I do it is, pass a variable(counter) and each time increment it, > when it > gets to a certain value, then you know what to do... > > > From: John Butler > Subject: best way to limit # of attempts to login to protected page? > > > If I want to restrict the number of times someone can attempt to login > > to a protected page, what is the best way? > > > > ...update a db field (with an incrementally counting number: +1 for > > every attempt) in a record whose key field is their IPADDRESS? And when > > it hits the threshhold # then disallow that IP from trying again? Then > > use a trigger to delete records older than (24) hours... > > > > ? ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Associated Messages, from the most recent to the oldest:
but then how do you keep people from simply coming in via a manipulated URL w/formvars set the way they want them - and thus getting around that kind of guard?Anup Setty wrote:> The way I do it is, pass a variable(counter) and each time increment it, > when it > gets to a certain value, then you know what to do... > > > From: John Butler > Subject: best way to limit # of attempts to login to protected page? > > > If I want to restrict the number of times someone can attempt to login > > to a protected page, what is the best way? > > > > ...update a db field (with an incrementally counting number: +1 for > > every attempt) in a record whose key field is their IPADDRESS? And when > > it hits the threshhold # then disallow that IP from trying again? Then > > use a trigger to delete records older than (24) hours... > > > > ? ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
John Butler
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...