php - How to configure users ban for more maxAttempts in login?

Solution:

You will need to create a column for users which would count their unsuccessful login attempts. At every unsuccessful attempt you would increment this value and block the user if a certain limit has reached.

If the login has been successful, then set the counter to 0.

Solution:

I tested it and it was right.

• First of all create two event listeners in your EventServiceProvider. SuccessfulLogin and FailedLogin

protected $listen = [
        Registered::class => [
            SendEmailVerificationNotification::class,
        ],
        'Illuminate\Auth\Events\Login' => [
            'App\Listeners\SuccessfulLogin',
        ],

        'Illuminate\Auth\Events\Failed' => [
            'App\Listeners\FailedLogin',
        ],
    ];
Copy code

• in SuccessfulLogin :

public function handle(Login $event)
    {
        
        $event->user->user_last_login_date = Carbon::now();
        $event->user->unsuccessful_login_count = 0;
        $event->user->save();

    }
Copy code

• in FailedLogin :

$event->user->unsuccessful_login_count += 1 ;
        $unsuccessful_count =   General::first()->max_attempts;

        if ($event->user->unsuccessful_login_count == $unsuccessful_count ) {
            $event->user->three_attempt_timestamp = Carbon::now()->toDateString();
        }
        if ($event->user->unsuccessful_login_count > $unsuccessful_count ) {
            $event->user->is_block = 1;
        }

        $event->user->save();
Copy code