The password can only be tried for a max. of 3 times before the account is locked. What is the easiest way of adding this feature to website? Hope this desc helps? please ask me if you need more info.

Appreciate your great help.

Rams

__________________
Rams

Where is the user information stored?

For a database, add a column to flag the account as locked. Keep a tally of the failed tries in session while the user is attempting to log in. After the 3rd failed attempt, update the database with the lock flag set. Do you want the lock to expire? Instead of stored a simple flag (bit) store a timestamp. Determine what your timespan is for account lockout, and set/check the timestamp accordingly.

-Peter

Thanks very much, Your approach is straight and simple way. I'd already implemented and working good.

Appreciate your great help!!!