Delay login for sometime if users fails for three times in apex

Question

i have a requirement in apex 4.1,
suppose a user login to it and if he fails for three times consequetively than he will not able to login for next 30 minutes.this is the function i am using for doing authentication.
i want to show timer at the top of the login page as user fails to login for three times continously..same functionality which is present in Apex 4.2.
create or replace
FUNCTION LWM_CHECK_CREDENTIALS(P_USERNAME IN VARCHAR2,P_PASSWORD IN VARCHAR2)
RETURN boolean
IS
LC_USERNAME_1 LWN_LOGIN.USERNAME%TYPE;
LC_PASSWORD_1 LWN_LOGIN.PASSWORD%TYPE;
LN_COUNT NUMBER:=0;
LN_COUNT1 NUMBER;
LC_SQLERRM VARCHAR2(500);
LN_COUNT2 NUMBER;
BEGIN
SELECT USERNAME,PASSWORD INTO LC_USERNAME_1, LC_PASSWORD_1
FROM LWN_LOGIN
WHERE UPPER( USERNAME) = UPPER(P_USERNAME)
AND PASSWORD = (P_PASSWORD);
UPDATE LWN_LOGIN SET COUNT= LN_COUNT
WHERE UPPER(USERNAME)=UPPER(P_USERNAME);
-- apex_util.set_authentication_result(0);
RETURN true;
EXCEPTION
WHEN OTHERS THEN
SELECT COUNT INTO LN_COUNT1
FROM LWN_LOGIN
WHERE UPPER(USERNAME)=UPPER(P_USERNAME);
if ln_count1 <=2 then
UPDATE LWN_LOGIN SET COUNT = LN_COUNT1 +1 ,
TIMESTAMP = SYSTIMESTAMP --to_char(SYSdate,' HH24:MI:SS')
WHERE UPPER(USERNAME)=UPPER(P_USERNAME);
end if;
LC_SQLERRM:=SQLERRM;
SELECT COUNT INTO LN_COUNT2 FROM LWN_LOGIN
WHERE UPPER(USERNAME)=UPPER(P_USERNAME);
IF LN_COUNT2=3 THEN
--APEX_UTIL.SET_AUTHENTICATION_RESULT(6);
DBMS_LOCK.SLEEP(6);
-- null;
--INSERT INTO XXSAQUIB_TEST(A,B,C) VALUES(LC_SQLERRM,LN_COUNT2,'max attempt');
end if;
return false;
END;
Can any one provide me any link related to this which is helpful for me.
Thanks in advance.
Edited by: 969314 on 05-Nov-2012 03:17
Edited by: 969314 on 05-Nov-2012 04:02

Answer 1

Hi,
When your authentication fails, stamp a "last failure" time on the record. Then check in your authorization that if the number of attempts is > X then the last failure timestamp must be less than sysdate - 30 mins.
Then set the message text to be something like "you cannot log in for (x) minutes" where (x) is calculated based on sysdate and the last failure date.