I'm fairly new to asp.net and trying to use a session counter to check for when someone has tried to log in three times it counts and when reaches three it locks them out. I know it's easy but my brain is fried.
Protected Sub btnLogin_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles btnLogin.Click
Dim IsFound As Boolean = False
If Page.IsPostBack Then
IsFound = clsDataLayer.GetUser(Server.MapPath("AddressBook.mdb"), txtUSERID.Text, txtPassword.Text)
If (IsFound) Then
'user credentials were found in the database so notify the system that the user is authenticated
lblStatus.Text = "Welcome"
'if authentic then wait three seconds to display the welcome label then send user to mymobilepage
Response.AddHeader("REFRESH", "3;URL=mymobilepage.aspx")
Else 'invalid user credentials
Dim myAttempts As Integer = Convert.ToInt16(Session("AttemptsCount "))
myAttempts = myAttempts + 1
Session("AttemptCount") = myAttempts 'update the session variable with the new value
lblStatus.Text = "The User ID and/or Password supplied is incorrect. Please try again!"
If myAttempts >= 3 Then
Dim myDAL As New clsDataLayer
myDAL.Lockuser(Server.MapPath("Addressbook.mdb"), txtUSERID.Text, False)
lblStatus.Text = "Your account has been locked and will need to be reset by the system administrator!"
End If
End If
End If
Can someone direct me the proper way?
Unsolved 
