如何使用会员资格来锁定asp.net网站中的用户? [英] how to use membership for locking user in asp.net website?

问题描述

在我的Web应用程序中，我有一个登录表单.如果有人输入错误的密码超过5次，我想锁定该用户一段时间.我该怎么办?有什么建议吗?

in my web application i have a login form. if anyone enters a wrong password more than 5 times, i want to lock that user for some time. how can i do so? any suggestions?

using session is definitely a bad idea, any good idea for carrying out that task?

推荐答案

尝试一个......

Try This One...

<connectionstrings>
  <add name="ApplicationServices">
    connectionString=
      "data source=.\SQLEXPRESS;
      Integrated Security=SSPI;
      AttachDBFilename=|DataDirectory|\aspnetdb.mdf;
      User Instance=true" 
      providerName="System.Data.SqlClient"/>
</add></connectionstrings>
  
<system.web>    
  <authentication mode="Forms">
     <forms loginurl="~/Login.aspx" timeout="2880" />
  </authentication>
</system.web>

之后，您可以使用成员身份...

After This U can Use Membership...

<system.web>

<membership>
<providers>
  <clear />
  <add name="AspNetSqlMembershipProvider">
    type="System.Web.Security.SqlMembershipProvider"
    connectionStringName="ApplicationServices"
    enablePasswordRetrieval="false"
    enablePasswordReset="true"
    requiresQuestionAndAnswer="false"
    requiresUniqueEmail="false"
    maxInvalidPasswordAttempts="5"
    minRequiredPasswordLength="6"
    minRequiredNonalphanumericCharacters="0"
    passwordAttemptWindow="10"
    applicationName="/"/>
</add></providers>
</membership>
    
<profile>
<providers>
  <clear />
  <add name="AspNetSqlProfileProvider">
    type="System.Web.Profile.SqlProfileProvider"
    connectionStringName="ApplicationServices"
    applicationName="/"/>
</add></providers>
</profile>
    
<rolemanager enabled="false">
<providers>
  <clear />
  <add name="AspNetSqlRoleProvider">
    type="System.Web.Security.SqlRoleProvider"
    connectionStringName="ApplicationServices" 
    applicationName="/"/>
  <add name="AspNetWindowsTokenRoleProvider">
    type="System.Web.Security.WindowsTokenRoleProvider" 
    applicationName="/"/>
</add></add></providers>
</rolemanager>
    
</system.web>

这篇关于如何使用会员资格来锁定asp.net网站中的用户?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！