how to stop the password tries in the .htaccess protected ..

External Since: Nov 16, 2003 Posts: 1

To improve the security and stop the password tries in the .htaccess
protected folder, HOW can I disable a .htpasswd user if in a short time,
this user's password has been typed in wrong for 10 times?

External Since: Jul 10, 2003 Posts: 12

"hui zhang" <huizhang66.RemoveThis@hotmail.com> wrote in
news:CVNtb.404270$6C4.210905@pd7tw1no:

> To improve the security and stop the password tries in the .htaccess
> protected folder, HOW can I disable a .htpasswd user if in a short time,
> this user's password has been typed in wrong for 10 times?

Assuming you are using the built in password crap, nope, nothing you can
do. Well, you could possibly implement some sort of cron job that scans
your apache error file and tries to catch this sort of thing, but it would
be a very ugly kludge at best.

I highly recommend switching to some other system for password protection.
There are several PHP packages that do authentication against a mysql
database and could be easily modified to do a timed lock on an account
after too many failed attempts.

--
Rossz

Remove 'NOSPAM' from my email address to reply directly