Question

I have a login form in a backend application

I need to find a way to restrict/denied users that for example has entered a bad username/password at least five times and show a meesage like:

echo "You have entered wrong 5 times your username/password, you have to wait 10 minutes to the next login"

But what do I have to save??

The ip or username? and where to save: file or db?

EDIT:

I apologise because I have no been clear in my question

I have implemented this system but using a file instead adding the some fields to the database

I can’t paste the code because is huuuuuge and I think I will use the system that I’m using now

Thanks alex and Michael Ames for your time but can’t accept your answers because I was looking for someone that it used file instead database

Answer 1

I apologise because I have no been clear in my question

I have implemented this system but using a file instead adding the some fields to the database

I can’t paste the code because is huuuuuge and I think I will use the system that I’m using now

Thanks alex and Michael Ames for your time but can’t accept your answers because I was looking for someone that it used file instead database