Could this be a Strongbox issue?

You have more than one try with strongbox. Not sure exactly how many, but at least three. Don't know if you can change that setting though...

its because you were caught sharing your password

If you hit up Ray he's always really thorough and helpful.

Are you hitting the back button when you put in the wrong username or are you clicking the link to go back to the login page.

Fantastic info franck!

Btw, not bashing them or anything. Im actually considering using them.

Azlord, i really dont remember. I think i tried both.

I know that's the case with ProxyPass, but it's also set to 3 times and then the 4th you are locked.

It might be the IP you are trying to enter from also. If you are trying to access the site from a bad IP that is on their abuse list that might explain it. Probably not though because if you were you probably would not even see the login box and get redirected the first try.

Maybe they have the settings set for only 1 incorrect login.

Does it reset after a certain amount of time?

I've had the same issue. The way I've found to fix that issue is to close all windows, relaunch firefox or internet explorer and try again.

I like strongbox/throttlebox - excellent products.

Proxy Pass rocks. I had it installed 3 years ago and I have to say it makes my life so much easier. It has saved me thousands.

I know that if you press the back button on the browser it fucks up. So make sure you click the link to go back. If you have tried a few times and have been unsucessful then you were block based on too many login attempts.

hope it helps

Yeah thats the problem because I was just hitting back and it blocked me so I got in touch with Ray to find out why

Does not lock you after 1 failed attempt. But, if you do fail, and you hit the back button to try again, it will not load the new Text Image, but instead the cached one from your previous attempt, so you will fail again as the image will not match up.

Yes, that could be the problem. As i said im not sure what exactly i did but its certainly an option.

Huge fan of Strongbox myself. But never had anyone locked out after just one attempt.

I know that if you press the back button on the browser it fucks up. So make sure you click the link to go back. .......

I represent Phantom Frog which uses
Geo-IP Tracking to track password abuse.
There is a limit on the number of failed login
attempts from the same IP and it is
configurable by the webmaster. Our Geo-IP
Tracking is the only one which tracks all
visits to your members area down to the city
level and longitude and latitude. Frog detects
the fact that the same password was used
in L.A. and NYC. We pinpoint the abuse
instantly, allowingfor the possibility of
legitimate travel.

The advantage of this approach is that it puts
less emphasis on the number of failed login
attempts and more emphasis on the location
of the login.

The second way we make life simple for
webmasters is through Automated Member
Support. So, if this abuse/sharing happens
while you're sleeping or away, your legitimate
paying member can have a fresh new
password re-issued to them via email.
As a result, the paying member is not blocked
out of your website and isn't looking to cancel
their membership.

Our product is integrated with CCBill, NetBilling, Paycom, NATS, MPA3, Verotel, 2000Charge, SegPay, Jettis, and 365Billing. We have excellent webmaster testimonials listed on our site.

We have been in business for over 4 years
and have very satisfied webmasters who have
been with us that entire time and counting.

Phantom Frog has a simple FREE Trial Version
which installs in 5 minutes. Please feel free to contact me with any
questions or feedback.

Most of customers were motivated to purchase
our password protection only 3 days after installing the Trial version!

Visit this link to learn more or to request a FREE Trial:
http://www.PhantomFrog.com/g

Thanks

George

Email: [email protected]
ICQ: 226948212

Thanks. I will buy a copy one of these days.

Thanks for the reply Dirty Franck. That's precisely
why we offer a FREE Trial. This way, you can test
drive Geo-IP Tracking and witness first-hand how
superior the abuse detection capability is.

More importantly, you can observe how much pass
abuse is "flying under the radar" of other protection
systems. You don't have to disable any other
software to install our Trial. We designed it that
way purposely so anyone could run a FREE
side-by-side comparison with Pennywize,
ProxyPass, I-Protect, etc.


Thanks

George

[email protected]
ICQ: 226948212

You get a lot more than one try with Strongbox.
Exactly how many depends on factors such as if you're accessing through a proxy
and if so, what kind of proxy.

The back button thing shouldn't be an issue at all with any recent version of Strongbox,
even for that really crappy bug filled browser from 2001 that we have to put in all
kinds of hacks for, IE6.

The webmaster of the site can look at the Strongbox reports and see exactly
why someone didn't get in. Most commonly they just keep entering invalid
user names and passwords. There IP isn't blocked, they just never enter the
correct user / pass.

The back button is an issue. It loads the image in the cache from the previous attempt so it is not the correct image to match up with the script. I have had strongbox installed in the last 3 months, and the back button creates bad image log ins, so unless your newer version is after that, then it is an issue with your current version.

my strongbox report shows 100's of typos when the member tries to login, they fuck it up a lot typing with one hand haha

I was using Strongbox and Ray offers great support.

But eventually we moved to a in house Geoip login system, We built a much better system and I honestly believe Geoip tracking is the way to go.

We had issues with SB, one user was considerd "good" by SB, yet he had logged in from Australia, Germany and the U.S. That was the last straw and we moved to a Geoip solution... it fixed our shared PW issues...

Well it seems that at least one browser has changed it's behavior and now isn't even
consistent, acting differently on each page load. Strongbox, Gmail, Google maps,
and a thousand other applications have just recently been updated to handle the new
inconsistencies. To update your Strongbox site, add the following to the BODY tag
of sblogin/badlogin.shtml:
So the whole body tag will look something like: