One the types of attacks to breach the security of systems is to attempt to guess the access passwords of the system users.
Usually, the attacker resorts to dictionaries of common passwords that users tend to use, and try them all until one succeeds. This brute force attack method is usually known as dictionary attack.
This class provides a solution to protect against dictionary attacks a site that require the users to authenticate to have access to restricted pages.
It keeps track of login attempts to the same account, disabling access to that account for a given period after a few consecutive failed attempts.
This way, dictionary attack attempts are discouraged as they may take a very very long to be successful.
This offers protection against automated attempts to guess login passwords also known as dictionary attacks.
It works by logging failed access attempts and when necessary it blocks the access to users that have failed to login too many times, as it may be an attack of a cracker using a dictionary of common passwords trying guess the correct password with an automated script.
The class uses a shared memory storage access class to keep track of the failed login attempts of each user.