block hacking attampts done

blocking hacking attampts done
Fahad-Md-Kamal · Mar 5, 2019 · 99c419e · 99c419e
1 parent 42dda10
commit 99c419e
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/php/loginChecker.php b/php/loginChecker.php
@@ -6,6 +6,11 @@
  $email = $_POST['email'];
  $pass = $_POST['pass'];
 
+ if (!isset($_SESSION['count'])) {
+ $_SESSION['count'] = 0;
+ }
+
+
  if (empty($email)) {
  $_SESSION['msg'] = "Please enter valid email address";
  }elseif (empty($pass)) {
@@ -16,14 +21,21 @@
  $conn = DataBaseConnection();
 
  $sql = "SELECT * FROM users WHERE email ='$email' AND pass = '$pass' ";
- if($result = $conn->query($sql)){
+ $result = $conn->query($sql);
+ if($result->num_rows > 0){
  foreach($result AS $row){
  $_SESSION['userName']= $userName = $row['name'];
  }
  $_SESSION['loggedIn'] = true;
  $_SESSION['msg'] = "Hey<br> $userName <br>Welcome Back ";
+ unset($_SESSION['count']);
  }else{
  $_SESSION['msg'] = "Invalid Username or Password";
+ $_SESSION['count']++;
+
+ if($_SESSION['count'] >= 3){
+ setcookie('loginCounter', true, time() + 10);
+ }
  }
  }
  header("location:../login.php");