note 25417 deleted from function.sleep by jsheets
| From: | jsheets@php.net | Date: | Mon, 27 Jan 2003 23:22:48 +0000 |
| Subject: | note 25417 deleted from function.sleep by jsheets | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-42891@lists.php.net to get a copy of this message | ||
using sleep to delay hacker attacks is a good ideea, if used in combination with session variables.
You can have a default sleep of 3 seconds if the login fails. Then a counter can be stored in a
session every time the login fails, and sleep duration increased. A system warning can be generated
when this counter exceeds 10 (more than 7 failed attempts). When the login is successful this
counter is reset to 3 seconds again.
Calin Uioreanu
top books shop
http://top-books.php9.com