redarrow Posted December 23, 2008 Share Posted December 23, 2008 When a user join my web site, I send them a validation link to validate there account via email, but also i send them. username password 4 digit code The user has to enter there, username and password and select there 4 digit code via select box with 4 selections o-9 what i want to no what is the possibility to get the select box number right if it forced. i fort the maths was 10 * 4 * 10 = 400 possibility's or is it 10 * 4 * 10 = 400 * 10 = 4000 possibility does that sound right. Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/ Share on other sites More sharing options...
revraz Posted December 23, 2008 Share Posted December 23, 2008 Wouldn't there be 9999 combinations? Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722456 Share on other sites More sharing options...
redarrow Posted December 23, 2008 Author Share Posted December 23, 2008 so you get the largest number then times by the 4 so 9999 that correct dont no. yes it is thank u. nine thousand nine hundred and nifty nine times Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722460 Share on other sites More sharing options...
revraz Posted December 23, 2008 Share Posted December 23, 2008 Just allow 3 attempts. Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722461 Share on other sites More sharing options...
Mark Baker Posted December 23, 2008 Share Posted December 23, 2008 Wouldn't there be 9999 combinations? No, 10000, because 0000 is also a valid combination Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722462 Share on other sites More sharing options...
redarrow Posted December 23, 2008 Author Share Posted December 23, 2008 would you do that via a temp database or session. revraz maybe even a database logging system. id ip timestamp attempts. Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722463 Share on other sites More sharing options...
revraz Posted December 23, 2008 Share Posted December 23, 2008 I would do it via a DB, if you do it via a Session, when they close their browser it will clear. Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722466 Share on other sites More sharing options...
redarrow Posted December 23, 2008 Author Share Posted December 23, 2008 well spotted mate cheers. Quote Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722469 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.