Hi Everyone,

I am creating a log-in form and I want to lock out the user after trying to log-in for more than 3 times. I am currently using ASP with Vbscript.

Any ideas?

Thanks for reading.

Create a session variable on the log in page with a value of zero. Request the session variable on a "we're sorry page", add 1 to it and redfine the session variable. Give them a link back to the log in page. Also on the log in page, have an if then statement thats says if variable > 2 then response.redirect to another page.

So when you first come to the log in, the variable is assigned a zero. Each time you fail and go to the access denied page, the variable is increased by 1.


Edited by - steelerfan70 on 05 Feb 2004 19:18:53