I was trying to figure out a way to trigger a database call on failure. Our database has a field for number of failed attempts. But I can not find a way to trigger it with AuthDBI Any hints -----Original Message----- From: jslive@xxxxxxxxx [mailto:jslive@xxxxxxxxx] On Behalf Of Joshua Slive Sent: Thursday, November 30, 2006 3:29 PM To: users@xxxxxxxxxxxxxxxx Subject: Re: How to Lock a user out after 3 bad attempts On 11/30/06, Jones Scott - sjones <Scott.Jones@xxxxxxxxxx> wrote: > > > > > Is there a module that will work with AuthDBI to help lock a user out after > 3 bad attempts Not that I know of. It is a harder problem than it might appear to be. Since HTTP is stateless, you'd need to write to a database on each failed authentication attempt, and then figure out some way to keep the database fresh. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx *************************************************************************** The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please resend this communication to the sender and delete the original message or any copy of it from your computer system. Thank You. **************************************************************************** --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|