login- only 3 attempts?

hello

i was just requiring some help on creating a web application, being a simple login that would give you 3 tries to login and then display a screen to saying you were locked out, and if succesful displays a screen with a form on it.

just wondering if i could get some help on this.

thankyou

joey

You cannot do this with javascrpt (the forum section where you posted your question) because it can be bypassed when done in javascript.

You must use a server side scripting language and keep the attempt count in a database of some kind (mysql, flat-file,...) Note: You cannot use a session to hold the attempt count because you can get a new session and a new set of attempts by simply dropping the session id and starting a new session.

with just javascript, you could allow one try or infinite tries, but not a specific number.