How to block a user account for 30 minutes after 5 failed login attempts with asp.net?

Question

I am using asp.net membership provider for user management. I have a requirement to block user accounts for 30 minutes after 5 failed attempts. How can I do this using the server side asp.net membership provider?

I also want "Passwords should expire after 3 months," "Last 10 passwords used should be remembered." Is there any way to solve these requirements.

Answer 1

if you use SqlMembershipProvider, use

maxInvalidPasswordAttempts for trying

passwordAttemptWindow

ActiveDirectoryMembershipProvider,

maxInvalidPasswordAttempts

passwordAnswerAttemptLockoutDuration

http://msdn.microsoft.com/en-us/library/ff648345.aspx#paght000022_usingthesqlmembershipprovider

Answer 2

MaxInvalidPasswordAttempts, PasswordAttemptWindow.

, , . , reset. , .

Answer 3

ASp.Net - , , work.i-e

• , 30 .
• , 3 , .
• 10 , .

Answer 4

, . ..

• , , , , , 5 , , null

• 5 script, , 30

• , .. , , , 3 ,

• , 10 , ( ), , 10, ,

Answer 5

. , . : http://msdn.microsoft.com/en-us/library/44w5aswa.aspx