This topic is locked
[SOLVED]

 Blocking access to the login page after three unsuccessful login attempts

1/6/2019 06:45:54
PHPRunner General questions
C
chcp author

I want to secure my login. I have followed these instructions.

https://xlinesoft.com/articles/system_access_lock.htm

I guess the tutorial is for an older version. I've adjusted the code to 3 parts by function. System still reports Invalid login.

Can you help me find a bug or is this a bad way?
Thank you!

Tomas
P.S. I use PHPRunner 10

Please delete this account 1/6/2019



I want to secure my login. I have followed these instructions.

https://xlinesoft.com/articles/system_access_lock.htm

I guess the tutorial is for an older version. I've adjusted the code to 3 parts by function. System still reports Invalid login.

Can you help me find a bug or is this a bad way?
Thank you!

Tomas
P.S. I use PHPRunner 10


https://asprunner.com/forums/topic/24365-blocking-access-to-the-login-page-after-three-unsuccessful-login-attempts/

C
chcp author 1/6/2019

Hi!

Thank you, I also found this. Is it possible to change the blocking time?
Tomas

Please delete this account 1/6/2019



Hi!

Thank you, I also found this. Is it possible to change the blocking time?
Tomas


quote excerpt ex https://xlinesoft.com/articles/system_access_lock.htm
if ($data["Attempts"]>=3)

{

if($diff<30)

{

echo "<p align=center>
<font color=red><b>Access denied for 30 minutes</b> <font></p>";

return false;

unquote excerpt
You need to proceed to the code lines to change the blocking time as well as the number of possible attempts manually.
By default PHPRunner's built-in blocking time after three unsuccessful login attempts is set to 5 minutes and the purpose

is to stop brute-force and else attacks to fish out the login credentials automatically, by hacking attack. So, in my

opinion the default blocking time of 5 minutes is fully okay to do the job.

C
chcp author 1/6/2019

Hi!
Thank you very much!
Tomas