Very Computer

by **r..** » Fri, 04 Aug 2000 04:00:00

I am using .htaccess to hold passwords to a section on our site.
Members who haven't read the directions try to put in any number of
combinations and then fuss because they can't get in. Can a custom
Authorization Required Page be made to show when they use up their 3
tries and get the error message? I've seen it on another site in the
past but can't remember where.

Thanks in advance for any advice,

Rick

by **Dan Wilg** » Sat, 05 Aug 2000 04:00:00

> I am using .htaccess to hold passwords to a section on our site.
> Members who haven't read the directions try to put in any number of
> combinations and then fuss because they can't get in. Can a custom
> Authorization Required Page be made to show when they use up their 3
> tries and get the error message? I've seen it on another site in the
> past but can't remember where.

> Thanks in advance for any advice,

> Rick

You could try to do something where you only allow three login attempts from a
given IP address before sending a permanent "403 Forbidden" response, but that
wouldn't work if the user was using a proxy (or even AOL).

You don't have direct control over anything but the realm name that appears in
a password request dialog (generated via Basic authentication), so that is not
an option either.

** Remove the REMOVE in my address address to reply reply **

Very Computer

Can Custom Authorization Required Page Be Used?

Can Custom Authorization Required Page Be Used?

Can Custom Authorization Required Page Be Used?