Lock IP

[Ario.Paxaz]

Hi

 

I Lock the IP that 3 time  enter wrong password in login form  by below code.

  if  PassMiss=3 then
    Begin
      IPAddress:=UniApplication.RemoteAddress;
      UniServerModule.SessionTimeout:=1000;
      UniServerModule.BlockedIPList.Add(IPAddress);
      Exit
    End;

But after this ,all user after login into web application ,they automatically  back into login form.

notice that i use SSL certification.

 

 

 

Best Regards.

[Farshad Mohajeri]

This will change SessionTimeout for ALL session and should never be called inside a session:

UniServerModule.SessionTimeout:=1000;

You must lock servermodule before modifying it inside a session:

UniServerModule.Lock;
try
   UniServerModule.BlockedIPList.Add(IPAddress);
finally
   UniServerModule.UnLock;
end;

[Farshad Mohajeri]

,all user after login into web application ,they automatically  back into login form

 

Yes, because you have set SessionTimeout to 1 second.