redarrow Posted December 23, 2008 Share Posted December 23, 2008 When a user join my web site, I send them a validation link to validate there account via email, but also i send them. username password 4 digit code The user has to enter there, username and password and select there 4 digit code via select box with 4 selections o-9 what i want to no what is the possibility to get the select box number right if it forced. i fort the maths was 10 * 4 * 10 = 400 possibility's or is it 10 * 4 * 10 = 400 * 10 = 4000 possibility does that sound right. Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/ Share on other sites More sharing options...
revraz Posted December 23, 2008 Share Posted December 23, 2008 Wouldn't there be 9999 combinations? Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722456 Share on other sites More sharing options...
redarrow Posted December 23, 2008 Author Share Posted December 23, 2008 so you get the largest number then times by the 4 so 9999 that correct dont no. yes it is thank u. nine thousand nine hundred and nifty nine times Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722460 Share on other sites More sharing options...
revraz Posted December 23, 2008 Share Posted December 23, 2008 Just allow 3 attempts. Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722461 Share on other sites More sharing options...
Mark Baker Posted December 23, 2008 Share Posted December 23, 2008 Wouldn't there be 9999 combinations? No, 10000, because 0000 is also a valid combination Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722462 Share on other sites More sharing options...
redarrow Posted December 23, 2008 Author Share Posted December 23, 2008 would you do that via a temp database or session. revraz maybe even a database logging system. id ip timestamp attempts. Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722463 Share on other sites More sharing options...
revraz Posted December 23, 2008 Share Posted December 23, 2008 I would do it via a DB, if you do it via a Session, when they close their browser it will clear. Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722466 Share on other sites More sharing options...
redarrow Posted December 23, 2008 Author Share Posted December 23, 2008 well spotted mate cheers. Link to comment https://forums.phpfreaks.com/topic/138189-solved-secuity-login-idar/#findComment-722469 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.