login

I add to my database pcms2_users a field name Active

I want, when the user click the log in button if in the file active is a 1 they can enter to the download page


and popup a message than said you can enter to this page

on the login page, edit the Authenticate user behavior to store the Active column in a session variable.

int he Security Assist rules manager create a new rule as:

Allow If
Session Active = 1

the use the security assist show region behavior to show the message.

How I can made if the user enter the password incorrect more than one time how I can block that account

you would need to hand code this.

On login failure, set a session variable to 1. if they fail the login again set that session to 2.

then use an if statement to hide the login form if the session is equal to 2.

I create the
Security Assist rules manager create a new rule as:

Allow If
Session Active = 1

the use the security assist show region behavior to show the message.

but I have access to the download page

you need to add the access rule to the download page.

How I do that


I dont want the user enter to download page if he account is not actuve

use the security assist access pages manager to apply the access rule to the download page.

I add the rule

in the access pages manager

but I having access

I check and the instruction that you gave me

I dont work
I continues having access to the download page