For my site there is only one user me and I have not plans on allowing other people to register etc. Now there can be a big vunerbaility where you keep allowing a user to login without locking their account out. Since I am only there user if someone tried to login as me it would not be good if my account got locked out for around 30 minutes or so that means I will not be able to access my account :( I was thinking instead of locking that specific account out can I get the users IP addess store it and ban them from accessing the login page for around 30 minutes?
I know people (mostly) have dynamic IPs and they can change it but this would become a big problem if you had to keep doing it and people would probably get fed up of it.
...
Go to the complete details ...