php 登录三次,php – 使用Codeigniter限制登录尝试3次

我目前正在开发一个系统.我已经在我的登录模块中完成了但我想进行一些登录尝试.用户只有3次登录尝试,如果超过3次限制,该用户的电子邮件将被停用,否则将被罚5分钟.

我不知道如何开始它,但我知道的事情;您需要获取用户的IP地址,检查该电子邮件的尝试次数.

用户表

name (varchar)

email (varchar)

password (varchar)

confirm password (varchar)

attempts (int)

ip_address (varchar)

status (varchar)

调节器

public function login()

{

if($this->form_validation->run('login_validate') == FALSE)

{

echo json_encode(validation_errors());

}

else

{

$email = clean_data($this->input->post('email'));

$password = clean_data($this->input->post('password'));

$where = array('email'=>$email);

$get_user = $this->Crud_model->fetch_tag_row('*','users',$where);

if($get_user)

{

$check_password = $get_user->password;

if($this->session->tempdata('penalty'))

{

echo json_encode("Your account is ". $_SESSION['penalty']. " on penalty");

}

else

{

if(password_verify($password,$check_password))

{

if($get_user->status == 'Active')

{

$user_session = [

'id' => $get_user->id,

'first_name' => $get_user->first_name,

'middle_name' => $get_user->middle_name,

'last_name' => $get_user->last_name,

'email' => $get_user->email,

];

$this->session->set_userdata('logged_in',$user_session);

$session = $this->session->userdata('logged_in');

$this->session->user_id = $session['id'];

$this->session->email = $session['email'];

$this->session->fullname = $session['first_name'] .' '. $session['middle_name'] .' '. $session['last_name'];

echo json_encode("success");

}

else if ($get_user->status == 'Inactive')

{

echo json_encode("Your account is inactive. Contact our human resource department regarding this problem.");

}

}

else

{

$attempt = $this->session->userdata('attempt');

$attempt++;

$this->session->set_userdata('attempt', $attempt);

if($attempt == 3)

{

echo json_encode("Your account is locked");

$this->session->set_tempdata('penalty', true, 10);

$this->session->set_userdata('attempt', 0);

}

else

{

echo json_encode("Invalid Credentials");

}

}

}

}

else

{

echo json_encode("Invalid Credentials");

}

}

}

注意：以上是我的登录功能.它工作正常(我对字段的验证,如果帐户已存在,用户名和密码正确等).fetch-> tag->行只能获取特定的行

问题：任何人都可以启发或指导我如何进行登录尝试吗？