Hi,

I have a servlet application. The user authentication is done at the
application level by storing user id and password in DB. I need to allow
only a maximum of, say, 3 unsuccessful login attempts, after which the user
should be suspended a fixed number of hours. Any ideas as to how this can be
implemented? One way I can think of is to store the info (whether he can
login and if he can not, till when) in DB and use it.

Thanks,
Suresh

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to