Session in asp using cookies

Question

I am using cookies (cookieless= AutoDetect) for my website.How can i control a session eg logoff a user who has been inactive for an hour and also lock out a user account if a user tries more than 4 times to login.Lock out a user for an hour and allowed back again. Thank you in advance.

Austin Mudadi · Answer

It cant work because i am using cookieless Forms Authentication FormsAuthenticationTicket ticket = new FormsAuthenticationTicket( 1 // ticket version this.Username.Text.Trim() // authenticated username DateTime.Now // issueDate DateTime.Now.AddMinutes(30) // expiryDate true // true to persist across browser sessions // userData // can be used to store additional user data FormsAuthentication.FormsCookiePath); string encryptedTicket = FormsAuthentication.Encrypt(ticket); HttpCookie AuthCookie =new HttpCookie(FormsAuthentication.FormsCookieName encryptedTicket); AuthCookie.HttpOnly = true; AuthCookie.Secure = true; AuthCookie = FormsAuthentication.GetAuthCookie(Username.Text true); AuthCookie.Expires = DateTime.Now.AddMinutes(30); Response.Cookies.Add(AuthCookie); FormsAuthentication.RedirectFromLoginPage(Username.Text false);

Raja T · Answer

Hello Austin Please refer below links http://www.aspdotnet-suresh.com/2015/04/lock-user-after-3-attempts-in-aspnet-using-csharp-vbnet-with-example.html http://forums.asp.net/t/1999074.aspx?How+to+enable+account+lockout+after+3+failed+login+attempts+in+ASP+net+web+pages+site+ http://www.dotnetfunda.com/forums/show/10534/lock-account-after-3-unsuccessful-attempt https://msdn.microsoft.com/en-us/library/ms178581.aspx