I made custom login page with open sources. I want to set the times of login password false(?). I mean.. when user insert his password in login page and that is incorrect password, I want to prevent to try to login with same username after 5 times incorrect password. This is for user-security. Is there a way to prevent from trying to login with same username more than 5 times incorrect password? sorry for not good English expression. And thank you.

  • 1
    Have you check any of the existing implementations? – Butuzov Apr 10 '18 at 12:56
  • How have you made the custom login page? – Mat Apr 10 '18 at 13:38
  • this is not an effective way to prevent brute force attacks, as they are coming from many IPs and likely to randomally check different users. In addition this kind of strategy will make it easy for an attacker to prevent an actual user from logging in. The best defense is to force good passwords. – Mark Kaplun Apr 10 '18 at 14:12
  • I made custom login page by googling, haha. – JJang Apr 11 '18 at 1:15
  • //Mark kaplun. there are some ineffectives. But when I made profile page usgin username(this included in url), I need to protect username. – JJang Apr 11 '18 at 1:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.