>Of course, this approach will require some method for them to unlock >their account.
A couple options for this....one is to add a timestamp to the users table as well for last login attempt, and reset the counter if the account is locked once a certain time is up (I usually use an hour). If your application has a backend, you can also create a function for the administrator to reset the counter manually. --- Mary Jo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:327411 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4