Hi,
I my web application, I wnat the application have 10 seconds delay upon any
invalid login.
What would be the best way to have 10 second delay without blocking and
using CPU time? Probably having a loop is not a good ida.
Thanks,
Alan 10 1406
do the loop on the client, with javascript
"A.M" <no*****@online.nospam> wrote in message
news:ul**************@TK2MSFTNGP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon
any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
I can't do that. It must be at server side because the delay is because of
security so no automated try/error remote program can try to find a
password.
"KB" <a@b.com> wrote in message
news:uY**************@TK2MSFTNGP10.phx.gbl... do the loop on the client, with javascript
"A.M" <no*****@online.nospam> wrote in message news:ul**************@TK2MSFTNGP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Thread.Sleep()
"A.M" <no*****@online.nospam> wrote in message
news:ul**************@TK2MSFTNGP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon
any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Just to clarify, the Thread.Sleep() method takes an integer that indicates
the number of milliseconds to sleep for. It is overloaded to take a TimeSpan
instead as well.
--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
Big things are made up
of lots of little things.
"bruce barker" <no***********@safeco.com> wrote in message
news:##**************@TK2MSFTNGP09.phx.gbl... Thread.Sleep()
"A.M" <no*****@online.nospam> wrote in message news:ul**************@TK2MSFTNGP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay upon any invalid login. What would be the best way to have 10 second delay without blocking and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Use Thread.Sleep and set the amount of time (like 3 seconds).
If you count the number of failed log ins you can multiply the delay time by
that value.
This makes the site respond proportionally slower upon each failed login.
Other users can log-in while the attacker is being delayed.
Also, consider implementing CAPTCHA functionality.
It really isn't that hard and is an even better strategy for defeating
automated programs.
--
Joe Fallon
Access MVP
"A.M" <no*****@online.nospam> wrote in message
news:OL*************@TK2MSFTNGP12.phx.gbl... I can't do that. It must be at server side because the delay is because of security so no automated try/error remote program can try to find a password.
"KB" <a@b.com> wrote in message news:uY**************@TK2MSFTNGP10.phx.gbl... do the loop on the client, with javascript
"A.M" <no*****@online.nospam> wrote in message news:ul**************@TK2MSFTNGP10.phx.gbl... Hi,
I my web application, I wnat the application have 10 seconds delay
upon any invalid login. What would be the best way to have 10 second delay without blocking
and using CPU time? Probably having a loop is not a good ida.
Thanks, Alan
Thank you for reply.
What is CAPTCHA functionality?
Alan
"Joe Fallon" <jf******@nospamtwcny.rr.com> wrote in message
news:e8**************@TK2MSFTNGP09.phx.gbl... Use Thread.Sleep and set the amount of time (like 3 seconds).
If you count the number of failed log ins you can multiply the delay time
by that value. This makes the site respond proportionally slower upon each failed login. Other users can log-in while the attacker is being delayed.
Also, consider implementing CAPTCHA functionality. It really isn't that hard and is an even better strategy for defeating automated programs. -- Joe Fallon Access MVP "A.M" <no*****@online.nospam> wrote in message news:OL*************@TK2MSFTNGP12.phx.gbl... I can't do that. It must be at server side because the delay is because
of security so no automated try/error remote program can try to find a password.
"KB" <a@b.com> wrote in message news:uY**************@TK2MSFTNGP10.phx.gbl... do the loop on the client, with javascript
"A.M" <no*****@online.nospam> wrote in message news:ul**************@TK2MSFTNGP10.phx.gbl... > Hi, > > I my web application, I wnat the application have 10 seconds delay upon any > invalid login. > What would be the best way to have 10 second delay without blocking and > using CPU time? Probably having a loop is not a good ida. > > Thanks, > Alan > >
Hi Alan,
CAPTCHA stands for "completely automated public Turing test to tell
computers and humans apart." What it means is, a program that can tell
humans from machines using some type of generated test. A test most people
can easily pass but a computer program cannot.
Luke
Thanks for information.
I am very interested to that concept. Can you refer me to some links? I
already searched Google, It came up with some abstracts concepts.
Alan
"[MSFT]" <lu******@online.microsoft.com> wrote in message
news:vh**************@cpmsftngxa10.phx.gbl... Hi Alan,
CAPTCHA stands for "completely automated public Turing test to tell computers and humans apart." What it means is, a program that can tell humans from machines using some type of generated test. A test most people can easily pass but a computer program cannot.
Luke
I Googled captcha and asp.net and found this: http://www.codeproject.com/aspnet/CaptchaImage.asp
--
Joe Fallon
"A.M" <no*****@online.nospam> wrote in message
news:OI**************@tk2msftngp13.phx.gbl... Thanks for information.
I am very interested to that concept. Can you refer me to some links? I already searched Google, It came up with some abstracts concepts.
Alan
"[MSFT]" <lu******@online.microsoft.com> wrote in message news:vh**************@cpmsftngxa10.phx.gbl... Hi Alan,
CAPTCHA stands for "completely automated public Turing test to tell computers and humans apart." What it means is, a program that can tell humans from machines using some type of generated test. A test most
people can easily pass but a computer program cannot.
Luke
Thank you.
"Joe Fallon" <jf******@nospamtwcny.rr.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl... I Googled captcha and asp.net and found this:
http://www.codeproject.com/aspnet/CaptchaImage.asp -- Joe Fallon
"A.M" <no*****@online.nospam> wrote in message news:OI**************@tk2msftngp13.phx.gbl... Thanks for information.
I am very interested to that concept. Can you refer me to some links? I already searched Google, It came up with some abstracts concepts.
Alan
"[MSFT]" <lu******@online.microsoft.com> wrote in message news:vh**************@cpmsftngxa10.phx.gbl... Hi Alan,
CAPTCHA stands for "completely automated public Turing test to tell computers and humans apart." What it means is, a program that can tell humans from machines using some type of generated test. A test most people can easily pass but a computer program cannot.
Luke
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics |
by: Salty Dog |
last post by:
Code:
<%Response.Buffer = False%>
<HTML>
<HEAD>
<title>Printing</title>
</HEAD>
<BODY>
<center>
<%
FilePath = "c:\WUTemp\441817810_receiver.txt"
|
by: Doug Thews |
last post by:
I ran into an interesting re-pain delay after calling the Abort() method on
a thread, but it only happens the very first time I call it. Every time
afterward, there is no delay.
I've got a...
|
by: Maheshkumar.R |
last post by:
Hi groups,
How i can introduce some milliseconds delay in application. How i can do
achieve this...
let me clearly say...
(1) I'm displaying slices of medical images.
For framerate - for...
|
by: mfeingold |
last post by:
I am working on a system, which among other things includes a server and a
..net control sitting in an html page and connected to the server. I ran into
a couple of problems, you guys might have...
|
by: nj609eagle |
last post by:
Recently and without warning, a report that I was using in my VB.NET
2003 application started to take 10 minutes to load.
It also take thisamount of time to open in the deisgner. I'm using a...
| |
by: weg22 |
last post by:
Hi all,
I'm developing a Visual Basic 2005 application to communicate with an
I2C device. I recently decided to add an i2c status bar. The status
bar is just a textbox with the following...
|
by: Ryan Liu |
last post by:
Will TcpClient.GetStream().Read()/ReadByte() block until at least one byte
of data can be read?
In a Client/Server application, what does it mean at the end of stream/no
more data available? ...
|
by: coolsti |
last post by:
I have an applet that accepts data as a stream from a php script using the following code snippet:
String dataendpoint = "http://phpfunction.php";
URL url = new...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...
| |
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated ...
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
|
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence...
| |