MySQL Account lockout policy

[olsen6228]

My Project X uses MySQL to authenticate users to access the secure web application that we have. Currently, there is no limit on how many tries a user has to get into the system. Is there a way to implement an account lockout after so many retries before the account needs to be
reset? Any help would be appreciated.

Thanks much !!

 

[jemminger]

why not add a column to the user table to store the login attempt count? i do this in my applications. with each attempt i increment the counter. upon successful validation, if they are over the threshold i tell them they are locked, otherwise i reset the counter to zero.



-jeff

http://www.jeffemminger.com

try { succeed(); } catch(E) { tryAgain(); } finally { rtfm(); }
i like your sleeves...they're real big