I have a problem in making my online testing application. I want the
user to enter his Login_ID and Password(already stored in database) in the home_page. Then this data is sent to the database. If the entered data doesn't match with that stored in the database, he will be asked to enter the details again on the same page but a message will be displayed in a LABEL that LoginID/Password doesn't match. This will happen three times on wrong entry and then when he enters the wrong data fourth time, he will be redirected to new page"Forget_Password". How the loop will be executed and where to store information whether it is the third time user is entering data or fourth time? Friends, Please help me. Any help will be appreciated.

Gaurav

__________________
Gaurav

You could store that in the database, together with the user account.

E.g. you have a table with UserName, Password and LoginFailureCounts.

When a user logs in with the right name, but with a wrong password, you increase LoginFailureCounts. On successful login, you reset it to 0 again.

The good thing of this is that it works from multiple locations / browsers. However, it's also possible for a different user to deliberately screw up someone else's account....

HtH,

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.

Thanks Imar. But this is not the solution to my problem. I want to do this thing in Program. I want that if a user enters wrong Password, LoginID or both, same page(Login_Page) will open and the counter will be increased by 1. Initially counter will be equal to 1. So,when user clicks on Sign_In button, a loop will be run like this.

'If data doesn't match then this loop will execute
If counter < 3 Then
Label1.text = "error message"
password.text = ""
Else
Response.Redirect("other_page")
End If
counter = counter + 1

Now, the problem is that I dont know where to store this variable and how can I assign it an initial value of 0. Also, Keep in mind that I want to increment the value stored in this variable each time the above loop executes.

Thanks in advance.

Why is that not a solution to your problem? It does exactly what you want: keep track of the number of failed logon attempts.

If you don't want to store that data in the database, you can also store it in a session variable. However, with a non-persistent data storage like session state, it's easy for the user to circumvent your security mechanism; they simply close and reopen the browser and they have three more tries to go...

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.

Imar, I tried Session variable. But I dont have any idea where and how to initialize value of this session variable to 0("zero"). Once I know how to initialize it to zero, rest I can do in my coding.

'I tried this code also:
Private Sub Page_Load(............)
 Session("var") = 0
End Sub

Private Button_Click(........) Handles Button.Click
 'If data doesn't match then
 If Session("var") <3
 'other code here
 End If
 Session("var") = Session("var") + 1


But on debugging, this is giving error. So, I want some way to initialize this session variable to 0 and then checking and incrementing its value in my code.

Thanks for replying to me ....

Gaurav

I'd say that Session("var") = 0 should work.

However, since you load it in Page_Load, it gets reset every time the time loads (including post backs).

You can check for a Null value before you access the session variable:

Private myCount As Integer
If Not Session("var") Is Nothing Then
  myCount = Convert.ToInt32(Session("var"))
Else
  myCount = 0
  Session("var") = myCount
End If

HtH,

Imar