Hi,
I my web application, I wnat the application have 10 seconds delay upon any
invalid login.
What would be the best way to have 10 second delay without blocking and
using CPU time? Probably having a loop is not a good ida.
Thanks,
Alan 10 1415
do the loop on the client, with javascript
"A.M" <no*****@online .nospam> wrote in message
news:ul******** ******@TK2MSFTN GP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon
any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
I can't do that. It must be at server side because the delay is because of
security so no automated try/error remote program can try to find a
password.
"KB" <a@b.com> wrote in message
news:uY******** ******@TK2MSFTN GP10.phx.gbl... do the loop on the client, with javascript
"A.M" <no*****@online .nospam> wrote in message news:ul******** ******@TK2MSFTN GP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Thread.Sleep()
"A.M" <no*****@online .nospam> wrote in message
news:ul******** ******@TK2MSFTN GP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon
any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Just to clarify, the Thread.Sleep() method takes an integer that indicates
the number of milliseconds to sleep for. It is overloaded to take a TimeSpan
instead as well.
--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
Big things are made up
of lots of little things.
"bruce barker" <no***********@ safeco.com> wrote in message
news:##******** ******@TK2MSFTN GP09.phx.gbl... Thread.Sleep()
"A.M" <no*****@online .nospam> wrote in message news:ul******** ******@TK2MSFTN GP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Use Thread.Sleep and set the amount of time (like 3 seconds).
If you count the number of failed log ins you can multiply the delay time by
that value.
This makes the site respond proportionally slower upon each failed login.
Other users can log-in while the attacker is being delayed.
Also, consider implementing CAPTCHA functionality.
It really isn't that hard and is an even better strategy for defeating
automated programs.
--
Joe Fallon
Access MVP
"A.M" <no*****@online .nospam> wrote in message
news:OL******** *****@TK2MSFTNG P12.phx.gbl... I can't do that. It must be at server side because the delay is because of security so no automated try/error remote program can try to find a password.
"KB" <a@b.com> wrote in message news:uY******** ******@TK2MSFTN GP10.phx.gbl... do the loop on the client, with javascript
"A.M" <no*****@online .nospam> wrote in message news:ul******** ******@TK2MSFTN GP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay
upon any invalid login. What would be the best way to have 10 second delay without blocking
and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Thank you for reply.
What is CAPTCHA functionality?
Alan
"Joe Fallon" <jf******@nospa mtwcny.rr.com> wrote in message
news:e8******** ******@TK2MSFTN GP09.phx.gbl... Use Thread.Sleep and set the amount of time (like 3 seconds).
If you count the number of failed log ins you can multiply the delay time
by that value. This makes the site respond proportionally slower upon each failed login. Other users can log-in while the attacker is being delayed.
Also, consider implementing CAPTCHA functionality. It really isn't that hard and is an even better strategy for defeating automated programs. -- Joe Fallon Access MVP "A.M" <no*****@online .nospam> wrote in message news:OL******** *****@TK2MSFTNG P12.phx.gbl... I can't do that. It must be at server side because the delay is because
of security so no automated try/error remote program can try to find a password.
"KB" <a@b.com> wrote in message news:uY******** ******@TK2MSFTN GP10.phx.gbl... do the loop on the client, with javascript
"A.M" <no*****@online .nospam> wrote in message news:ul******** ******@TK2MSFTN GP10.phx.gbl... > Hi, > > I my web application, I wnat the application have 10 seconds delay upon any > invalid login. > What would be the best way to have 10 second delay without blocking and > using CPU time? Probably having a loop is not a good ida. > > Thanks, > Alan > >
Hi Alan,
CAPTCHA stands for "completely automated public Turing test to tell
computers and humans apart." What it means is, a program that can tell
humans from machines using some type of generated test. A test most people
can easily pass but a computer program cannot.
Luke
Thanks for information.
I am very interested to that concept. Can you refer me to some links? I
already searched Google, It came up with some abstracts concepts.
Alan
"[MSFT]" <lu******@onlin e.microsoft.com > wrote in message
news:vh******** ******@cpmsftng xa10.phx.gbl... Hi Alan,
CAPTCHA stands for "completely automated public Turing test to tell computers and humans apart." What it means is, a program that can tell humans from machines using some type of generated test. A test most people can easily pass but a computer program cannot.
Luke
I Googled captcha and asp.net and found this: http://www.codeproject.com/aspnet/CaptchaImage.asp
--
Joe Fallon
"A.M" <no*****@online .nospam> wrote in message
news:OI******** ******@tk2msftn gp13.phx.gbl... Thanks for information.
I am very interested to that concept. Can you refer me to some links? I already searched Google, It came up with some abstracts concepts.
Alan
"[MSFT]" <lu******@onlin e.microsoft.com > wrote in message news:vh******** ******@cpmsftng xa10.phx.gbl... Hi Alan,
CAPTCHA stands for "completely automated public Turing test to tell computers and humans apart." What it means is, a program that can tell humans from machines using some type of generated test. A test most
people can easily pass but a computer program cannot.
Luke
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics |
by: Salty Dog |
last post by:
Code:
<%Response.Buffer = False%>
<HTML>
<HEAD>
<title>Printing</title>
</HEAD>
<BODY>
<center>
<%
FilePath = "c:\WUTemp\441817810_receiver.txt"
|
by: Doug Thews |
last post by:
I ran into an interesting re-pain delay after calling the Abort() method on
a thread, but it only happens the very first time I call it. Every time
afterward, there is no delay.
I've got a delegate inside the UI that I call to update the progress meter.
I use the Suspend() and Abort() methods based on button events.
I can watch the...
|
by: Maheshkumar.R |
last post by:
Hi groups,
How i can introduce some milliseconds delay in application. How i can do
achieve this...
let me clearly say...
(1) I'm displaying slices of medical images.
For framerate - for this i'm loading 2+ slices, 4+ slices in loop
to have cine impact..-> Ok working
(2) But if i want to reduce the speed...how i can introduce delay...
|
by: mfeingold |
last post by:
I am working on a system, which among other things includes a server and a
..net control sitting in an html page and connected to the server. I ran into
a couple of problems, you guys might have some insight about.
1) It takes 20 sec or so to open a tcp socket from the client to the server.
It just sits in the TcpClient.conect waiting for...
|
by: nj609eagle |
last post by:
Recently and without warning, a report that I was using in my VB.NET
2003 application started to take 10 minutes to load.
It also take thisamount of time to open in the deisgner. I'm using a
ADO.NET XML file as the datasource, so there is no network traffic.
Loking at the task manager, my CPU is low, and the memory isn't
changing.
I...
| |
by: weg22 |
last post by:
Hi all,
I'm developing a Visual Basic 2005 application to communicate with an
I2C device. I recently decided to add an i2c status bar. The status
bar is just a textbox with the following properties:
When I2C communication active:
Public Sub i2c_active()
statusBar.Text = "Exchanging Data..."
statusBar.BackColor = Drawing.Color.Red
|
by: Ryan Liu |
last post by:
Will TcpClient.GetStream().Read()/ReadByte() block until at least one byte
of data can be read?
In a Client/Server application, what does it mean at the end of stream/no
more data available? Client could send data once few seconds of minutes. Is
there an "end" at all?
In a C/S application, if server side call BeginginRead() again in...
|
by: coolsti |
last post by:
I have an applet that accepts data as a stream from a php script using the following code snippet:
String dataendpoint = "http://phpfunction.php";
URL url = new URL(dataendpoint);
InputStream is = url.openStream();
String line;
InputStreamReader isr = new InputStreamReader(is);...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it. ...
| |
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
|
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating...
| |