How to block a user account after 3 invalied attempts

Question

0.00/5 (No votes)

See more:

Hi folk's

Can any one help me out ,i done coding for if attempts 3 invalid user attempts by taking int static count variable,in that i have one drawback ,if one user made 2 invalid attempts ,and other user made 1st time invalid attempt and this account is blocking ,How can i rectify this problem can any one help me....

I placing my code below please check it out yar and tell me with one is the better option .....

C#

static int count = 0;
    public void  count_log()//this my user count static function............
    {
        BAL_ClassLibrary.Rcm_service.LoginEntities get_login_details = login_values();
        if (count >2)
        {
            Loginbal objbal=new Loginbal();
             objbal.account_block(get_login_details);
             ScriptManager.RegisterClientScriptBlock(Page, Page.GetType(), "Result", "alert('*Your Account is blocked')", true);
               count = 0;

        }
        else
        {
            ScriptManager.RegisterClientScriptBlock(Page, Page.GetType(), "Result", "alert('*Invalied username or password')", true);
            count++;
        }

I am calling this function, when user made invalid user attempt to login...
and i incrementing the count value.....

Posted 26-Sep-12 2:38am

mahesh.b.p.c

Updated 26-Sep-12 2:46am

Andrei Straut

v3

Add a Solution

Comments

Hadi Basiri 26-Sep-12 8:41am

You can use of Session.
Session["Count"]

4 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

RaisKazi · Answer 1 · 2012-09-26T03:33:00

Static is working as expected and its certainly not for what you are trying to do. Scope of static members is for app domain, that means every user has a access/scope to static member. So that its value gets influenced/changed by all the users.

In your case you need user specific login-attepmt count. You may use Sessions for this. Have a look at below links for information on "Asp.Net Sessions".

http://msdn.microsoft.com/en-us/library/ms178581(v=vs.100).aspx

http://msdn.microsoft.com/en-us/library/ms972429.aspx

Have a look at below links for "ASP.NET State Management".

ASP.NET State Management Overview

ASP.NET State Management Recommendations

Beginners Introduction to State Management Techniques in ASP.NET

TanvirRaihan · Answer 2 · 2012-09-26T02:50:00

You can add an extra column named "FailedLoginAttempts" in your user table, and update the value after each login attempt. After successfull login you should reset the column to 0 again.

But you need to keep in mind two important scenario...
1. if user puts wrong/ invalid user name how will you maintain that ?
2. anyone who knows someone other's username can block his/her account by trying again and again.

Hope this will help you...

Anuja Pawar Indore · Answer 3 · 2012-09-26T20:32:00

Solution 4

Refer this thread
http://stackoverflow.com/questions/9866493/block-a-user-after-a-specified-number-of-failed-logins[^]

Posted 26-Sep-12 20:32pm

Anuja Pawar Indore

prashant_khairnar · Answer 4 · 2012-09-26T04:39:00

Hello ,

first remove static declaration which scrudup your logic. please refer corrected below one

C#

    public void  count_log()//this my user count static function............
    {
        BAL_ClassLibrary.Rcm_service.LoginEntities get_login_details = login_values();
 int count = Functions.ToInt32(webSession.GetVariable("LoginCount"))
        if (count >2)
        {
            Loginbal objbal=new Loginbal();
             objbal.account_block(get_login_details);
             ScriptManager.RegisterClientScriptBlock(Page, Page.GetType(), "Result", "alert('*Your Account is blocked')", true);
               count = 0;
 
        }
        else
        {
            ScriptManager.RegisterClientScriptBlock(Page, Page.GetType(), "Result", "alert('*Invalied username or password')", true);
 
            count = Convert.ToInt32(webSession.GetVariable("LoginCount"));
                            count += 1;

                            webSession.SetVariable("LoginCount", count )
;
        }

Function is user define but you can use Convert.Toint to achieve it.

Please let us know if any.

How to block a user account after 3 invalied attempts

4 solutions

Solution 2

Solution 1

Solution 4

Solution 3

Add your solution here

Preview 0