hey guys,the following Php code uses sessions to restrict login access after a number of failed attempts more than 3 times...the code is just basic I.e no stripslashes and validation...

<?php
session_start();
if(isset($_SESSION["BAN"])){
echo "<font color='red'>you can no longer login for this session,<font color='blue'>please restart your browser</font></font>";
}else{
if(isset($_POST["submit"])){
$name=$_POST["name"];
$_SESSION["FAIL"];
if($name!="emmy"{
$_SESSION["FAIL"]++;
echo "<font color='red'>wrong password...try again </font><br>";
//echo "wrong by ".$_SESSION["FAIL"]." time(s)<br>";
}else{
echo "access granted....
<br> ";
}
if($_SESSION["FAIL"]>3){
$_SESSION["BAN"]="bad";
echo "you entered the wrong password too many times";
//header("location:pat.php";
}
}
echo <<< DOC
<form action="form.php" method="post">
<input type="text"name="name"/>
<input type="submit"name="submit"/>
</form>
DOC;
}
?>

enjoy...just comment and add your contributions