3 failed login attempts

Question

0.00/5 (No votes)

See more:

Hi All, I have an ASP.NET 4.0 C# site. I am tracking failed log in attempts. After 3 I lock account. I am using a database to keep track of invalid login attempts. I got it to work if user enters 3 bad attempts in a row. My problem is if they only have 2 failed attempts, I need to delete info in database before next user tries to log in, if I don't and they have just 1 failed attempt they will be locked out. I tried using if !IsPostBack on Page load, but apparently clicking on a link that brings user back to log in page is NOT a postback. Any ideas or suggestions would be greatly appreciated.

Thanks,
D

Posted 17-Oct-12 5:43am

D-Bar

Updated 17-Oct-12 6:02am

Akinmade Bond

v2

Add a Solution

2 solutions

Solution 1

Very simple, when a user successfully logs in, just add the logic to that process which sets that field back to 0.

Posted 17-Oct-12 5:48am

fjdiewornncalwe

Comments

D-Bar 17-Oct-12 15:43pm

Hi Marcus, Thanks for replying so soon. You answered my second problem before I even asked it! I just need it spelled out a little more since I am somewhat new to coding in ASP.NET 4 and C#. In my database I have a field called "IsLocked" data type int. If the value in this field is 1 will the app "magically" know that the account is supposed to be locked? I tried this.LoginUser.IsApproved = False;, but it is giving me an error.

Thanks,
D

psychic6000 17-Oct-12 23:19pm

in side the login process(code), use a boolean variable,read the isLocked into boolean, apply an if statement eg if(myboolean==false) { Say_user_is_looked(); return; } use return or reverse process(if you have written anything to database), but do not let user login.

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

psychic6000 · Accepted Answer · 2012-10-17T06:45:00

Solution 2

In your code, where user gets successful login, add code which resets the count back for the user. and every time a user successfully logins, its count must be reset, no matter how many times he failed to login.

Posted 17-Oct-12 6:45am

psychic6000

Updated 17-Oct-12 6:47am

v2

Comments

D-Bar 17-Oct-12 15:37pm

Thank-you very much psychic6000. You Da man (or woman)! This solved my first problem.
Marcus Kramer has answered my second problem before I even asked it! I just need it spelled out a little more since I am somewhat new to coding in ASP.NET 4 and C#.