|
In the example below, a user is allowed three attempts to enter the correct password.
After the third attempt, the user is restricted for a period of one minute.
Step 1: Enable Role-Based Security for your application using Iron Speed Designer.
Select Tools, Role Based Security Wizard, and follow the steps in the Role-Based Security Wizard.
Step 2: In the Application Explorer in Iron Speed Designer, select a start page for
your application. For your selected start page, select Properties, and go to the Security tab
in the Properties dialog. Set the access permissions for the page as “Grant access only to signed
in users”.
Step 3: Override the Login() and ProcessFailedLogin() methods in the SignIn_Control
class, located in:
.NET Framework 1.1:
|
...\<Application Folder>\Shared\SignIn_Control.Controls.cs or .vb
|
.NET Framework 2.0:
|
...\<App Folder>\App_Code\Shared\SignIn_Control.Controls.cs or .vb
|
C#:
using System; // insert as a first line of the code
public override void Login(bool bRedirectOnSuccess)
{
if (isBlocked())
{
BaseClasses.Utils.MiscUtils.RegisterJScriptAlert(this, "my message", "YOU CAN NOT
LOGIN NOW");
}
else
{
if (this.Page.Cache["UserKey_" + this.UserName.Text] != null &&
(int)this.Page.Cache["UserKey_" + this.UserName.Text] >3)
{
this.Page.Cache["UserKey_" + this.UserName.Text] = 0;
}
base.Login(bRedirectOnSuccess);
}
}
public bool isBlocked()
{
object userCounter = this.Page.Cache["UserKey_" + this.UserName.Text];
if ((Convert.ToInt32(userCounter)) >= 3 && (this.Page.Cache["UserBlocked"] != null))
{
return true;
}
return false;
}
protected override void ProcessLoginFailed(string message, string userName)
{
object FailedLoginCounter = this.Page.Cache["UserKey_" + this.UserName.Text];
if (FailedLoginCounter == null)
{
FailedLoginCounter = 0;
}
this.Page.Cache["UserKey_" + this.UserName.Text] = (int)FailedLoginCounter + 1;
if (((int)this.Page.Cache["UserKey_" + this.UserName.Text]) == 3)
{
this.Page.Cache.Insert("UserBlocked", 1, null, DateTime.Now.AddMinutes(1),
TimeSpan.Zero);
}
base.ProcessLoginFailed(message, userName);
}
|
Visual Basic .NET:
Import System ‘Insert in as a first line of code
Public Overrides Sub Login(ByVal bRedirectOnSuccess As Boolean)
If isBlocked Then
BaseClasses.Utils.MiscUtils.RegisterJScriptAlert(Me, "my message", "YOU CAN NOT LOGIN
NOW")
Else
If ((Not (Me.Page.Cache(("UserKey_" + Me.UserName.Text))) Is Nothing) _
AndAlso (CType(Me.Page.Cache(("UserKey_" + Me.UserName.Text)),Integer) > 3))
Then
Me.Page.Cache(("UserKey_" + Me.UserName.Text)) = 0
End If
MyBase.Login(bRedirectOnSuccess)
End If
End Sub
Public Function isBlocked() As Boolean
Dim userCounter As Object = Me.Page.Cache(("UserKey_" + Me.UserName.Text))
If ((Convert.ToInt32(userCounter) >= 3) _
AndAlso (Not (Me.Page.Cache("UserBlocked")) Is Nothing)) Then
Return true
End If
Return false
End Function
Protected Overrides Sub ProcessLoginFailed(ByVal message As String, ByVal userName As String)
Dim FailedLoginCounter As Object = Me.Page.Cache(("UserKey_" + Me.UserName.Text))
If (FailedLoginCounter = Nothing) Then
FailedLoginCounter = 0
End If
Me.Page.Cache(("UserKey_" + Me.UserName.Text)) = (CType(FailedLoginCounter,Integer)
+ 1)
If (CType(Me.Page.Cache(("UserKey_" + Me.UserName.Text)),Integer) = 3) Then
Me.Page.Cache.Insert("UserBlocked", 1, Nothing, DateTime.Now.AddMinutes(1),
TimeSpan.Zero)
End If
MyBase.ProcessLoginFailed(message, userName)
End Sub
|
|
