Hi Guys,
in order to prevent some mean brute force attack I thought implementing an account lock would be good.
I found the following:
--------------------
A full-featured membership provider also supports the locking out of
users after a consecutive number of failed login attempts within a
specified time period. A consumer uses the provider's
MaxInvalidPasswordAttempts and PasswordAttemptsWindow properties to
configure this feature. Once locked out, a user may not log in again
until his or her account is unlocked. MembershipProvider defines an
Unlock method for unlocking locked-out users, and the
System.Web.Security.MembershipUser class, which represents individual
users managed by the membership service, includes an IsLockedOut
property that indicates whether the corresponding user is currently
locked out of the system.
http://msdn.microsoft.com/en-us/library/aa479031.aspx
----------------
Now I wonder if it i ...
Go to the complete details ...