how to have a login attempts after 3invalid password cant login for 5minutes?

I would like to make this code to have a login attempts after 3 invalid input the user will be ban for logging-in in 5minutes then after the given time the user may login again.. how do i set a time? and is my code correct?

Expand|Select|Wrap|Line Numbers

  
<html>

<head>

<title>LOG IN</title>

</head>

<?php

session_start();

$username = (@$_POST['username']);

$password = (@$_POST['password']);

$attempts = ($_POST ['attempts']);
 
$error['alert'] = '';

$error['username'] = '';

$error['password'] = '';

$input['username'] = '';

$input['password'] = '';
 
if (isset($_POST['submit'])) 

{

    if ($_POST['username'] == '' || $_POST['password'] == '') 

    {
 
        if ($_POST['username'] == '') { 

            $error['username'] = 'required'; }

        if ($_POST['password'] == '') { 

            $error['password'] = 'required'; }    

        $error['alert'] = 'Please fill in required fields!';
 
         $_POST['username'];

         $_POST['password'];
 
        include('v_login.php');
 
        if($username!=$dbusername&& md5($password)!=$dbpassword)

         {

          $connect = mysql_connect("mysql1.000webhost.com","a4063609_renz","ny4n93");

                  mysql_select_db("a4063609_phplogi") or die ("Couldn't find db");
 
            // Increment login count... 

            mysql_query("UPDATE users SET attempts = attempts + 1 WHERE username = '$username'"); 
 
         // Fetch login count... 

            $result = mysql_query("SELECT attempts WHERE username = '$username'"); 

            $attempts = mysql_result($result);
 
         if($attempts >= 3) 

           { 

          echo "Please Wait!"; 

             }  
 
         }
 
    }

    else

    $error['alert'] = "Username or Password is incorrect";

    {
 
    if ($username&&$password)

    {

         $connect = mysql_connect("mysql1.000webhost.com","a4063609_renz","ny4n93");

                  mysql_select_db("a4063609_phplogi") or die ("Couldn't find db");
 
    $query = mysql_query("SELECT * FROM users WHERE username='$username'");
 
    $numrows= mysql_num_rows($query);
 
        if($numrows!==0)

        {

        while($row=mysql_fetch_assoc($query))

{

$dbusername= $row['username'];

$dbpassword= $row['password'];

$activated= $row['activated'];
 
if($activated=='0')

{

     header("location:not_active.php");

     exit();

}
 
}

if($username==$dbusername&& md5($password)==$dbpassword)

{

      mysql_query("UPDATE Users SET $attempts = 0 WHERE $username = 'username'"); 
 
    header("location:member.php");

    $_SESSION['username']=$username;
 
}

else

$error['alert'] = "Username or Password is incorrect";

include('v_login.php');

        }

    else

        {

        $error['alert'] = "Username or Password is incorrect";

        include('v_login.php');

        }
 
    }

    else

    {

        echo "";

    }    
 
    }
 
}
 
else

{
 
    include('v_login.php');

}
 
?>
 
</html>

Oct 10 '12 #1

Subscribe Post Reply

14873

johny10151981

1,059

1GB

First thing is why do you need to ask this question in two questions?

Secondly you can use session to save login attempt count with time limit. if in a short time duration user try to attempt log in for 3 times then you can set a variable in user database that would say locked, also there will have to be another variable that would describe when the locking started. simple example:

Expand|Select|Wrap|Line Numbers

 
<?php

$var=try_log_in();

if($var===false)

{

 if(isset($_SESSION['LogInAttempt'])==true && is_numeric($_SESSION['LogInAttempt'])==true && isset($_SESSION['FirstLogInAttemptTime'])==true && $_SESSION['FirstLogInAttemptTime']-time()<$certainTime)

{

 $_SESSION['LogInAttempt']++;

 if($_SESSION['LogInAttempt']==3)

  {

   the_function_to_lock_the_user();

  }

}

else

{

 $_SESSION['LogInAttempt']=1;

 $_SESSION['FirstLogInAttemptTime']=time(); 

}

 exit("With proper and nicely mannered comment");

}

?>

Oct 10 '12 #2

daikumi

thank you for your answer. But what is the function to lock the user? sorry I'm still a beginner sir do I still need to make another php file for that and include it to my login form or what? sorry sir and thank you

Oct 10 '12 #3

johny10151981

1,059

1GB

create one more column in your user table. name it lockckingtime or whatever that make sense, with the type timestamp . when third attempt fail sime set the current time. and in next login attempt check the difference between saved time and current time and lockcking time

Oct 11 '12 #4

by: sam | last post by:

HI, I installed php4 for apached and restart apache afterward. but my little php script generated error followint error: PHP Notice: Undefined index: myname in...

PHP

check for login attempts

by: tchangmian | last post by:

Hi all, If the user had log in with correct user id but wrong password, i would like to capture the time when the user fail to login for the 1st time. Within 24 hours, if the user had tried to...

ASP / Active Server Pages

Cant Login on a sql2005 machine from VS2005 IDE debug mode

by: =?Utf-8?B?Q2hpV2hpdGVTb3g=?= | last post by:

Hi, i got machine A that has sql2005, vs2005 project. project runs okay there. But when i copied that whole project folder to machine B, running sql2005, VS2005, edited the web.config file to...

.NET Framework

several login attempts

by: icesh | last post by:

hi i'm a newbie in php.. can you help me how to make several login attempt in php? (if we put wrong password/username,, we will go back to the previous form and we can try 3 more attempts to input...

PHP

Admin Login Id and password for Tomcat5.0

by: aradhanathawait | last post by:

Hi all Please tell me the default Login Id and password for Tomcat5.0 Admin. I have installed tomcat5 on Red hat linux 4, it didn't ask for admin password during installlation. Thanx and...

Apache Web Server

How to find login name and password for sqlserver 2005

by: selvamariappan | last post by:

Hi all, How to find login name and password for sqlserver 2005 in sql server authentication mode, In my sys i have installed .net and then i have installed sqlserver express, i want...

Microsoft SQL Server

Encoding and saving password during login

by: Punkis | last post by:

Hello all. I am having some questions about a subject. I am running a small social community using SocialEngine and i want to include phpbb3 with an arcade mod or any arcade board that support high...

PHP

Security Best Practice on failed login attempts

by: dharmbhav | last post by:

Hi, I am designing a login mechanism for a website. Presently, I am blocking the user account for 1 hour if there are 3 failed login attempts with-in 1 hour. However, I want to know if there is...

Software Development

How to login if administrator password is lost?

by: imranshaiks786 | last post by:

I lost my administrator password and there is no other users to login. How can I still login to my system?

Microsoft Windows

Easy Steps to Fix "Canon Printer Won't Connect to WiFi Network"

by: taylorcarr | last post by:

A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...

General

How to turn on java script in a villaon keypad mobile phone

by: Charles Arthur | last post by:

How do i turn on java script on a villaon, callus and itel keypad mobile phone

Java

Batch import of multiple excel files into the database

by: ryjfgjl | last post by:

If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...

Data Management

Merging data from multiple Excel files

by: ryjfgjl | last post by:

In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...

Data Management

Navigating the Data Structures and Algorithms (DSA)

by: BarryA | last post by:

What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...

Algorithms / Advanced Math

Looking to do Android software development, any suggestions? Is flutter better?

by: nemocccc | last post by:

hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?

General

Is that possible of reading the .csv file in column wise and the column have different lengths ?

by: Sonnysonu | last post by:

This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...

C / C++

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...

Windows Server

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

C / C++

how to have a login attempts after 3invalid password cant login for 5minutes?

Similar topics