Cookie time

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Dicky - 29 Oct 2004 16:18 GMT

Hi, I've set up a login form. I'd like to have a basic "Lock out"
using cookies if the client fails to enter the correct username & password
five times in a row. I've bulit the form and counter for how may failed
attempts but can't think how best to count the minutes for the lock out
(ideally 15 minutes). Thanks, Richard

Reply to this Message

NateNielsen - 30 Oct 2004 20:33 GMT

when you increment that cookie value, set another cookie value to something
like lastFailedAttemptDate - make that equal to now(). then in your app, if
the failed attempt count is over 5 and the lastFailedAttemptDate is greater
than 15 mins ago, then set the number of attempts to 0 again. should do it.
just remember people can delete their cookies, if you want this to really be
secure, use the db to do it. :) Nate Nielsen http://www.webclarity.com
-my site with free components, tutorials, n'stuff

Reply to this Message

Webmaster Forum / ColdFusion / Advanced Techniques / October 2004

Cookie time