php限制用户登录次数

<?php
session_start();

// 设置登录尝试次数上限
$max_attempts = 5;
$attempts_key = 'login_attempts';

// 检查是否已经记录了登录尝试次数
if (!isset($_SESSION[$attempts_key])) {
    $_SESSION[$attempts_key] = 0;
}

// 检查登录尝试次数是否超过上限
if ($_SESSION[$attempts_key] >= $max_attempts) {
    $time_remaining = 60 - (time() - $_SESSION['last_attempt_time']);
    if ($time_remaining > 0) {
        echo "登录尝试次数过多，请在 $time_remaining 秒后重试。";
    } else {
        $_SESSION[$attempts_key] = 0; // 重置尝试次数
        echo "登录尝试次数过多，请重试。";
    }
} else {
    // 模拟登录验证
    $username = $_POST['username'];
    $password = $_POST['password'];

    if ($username === 'admin' && $password === 'password') {
        echo "登录成功！";
        $_SESSION[$attempts_key] = 0; // 登录成功后重置尝试次数
    } else {
        $_SESSION[$attempts_key]++;
        $_SESSION['last_attempt_time'] = time();
        echo "用户名或密码错误，请重试。";
    }
}
?>