Tracking unwanted visitors

Original - php Code <?php /* Have a table with an IP, timestamp and a number of trys column */ //connect to the database mysql_connect(host, user, pass) or die("Couldnt connect to database"); mysql_select_db(db) or die("Couldnt select database"); $number_trys_allowed = 3; //set the amount of trys they're allowed $timeoutseconds = 300; //equals 5 minutes //get the time $timestamp = time(); $timeout = $timestamp-$timeoutseconds; //delete any entries in the database that are over or equal to amount of trys allowed and have waited 5 minutes mysql_query("DELETE FROM table WHERE timestamp < $timeout AND number_of_trys >= $number_trys_allowed ") or die(mysql_error()); //insert their IP into a database mysql_query("INSERT INTO table SET ip = '$REMOTE_ADDR', number_trys = 0") or die(mysql_error()); //check their username and password attempt $login = mysql_query("SELECT * FROM members_table WHERE username = '{$_POST['uname']}' AND password = '{$_POST['pass']}'") or die(mysql_error()); $num_rows = mysql_num_rows($login); if($num_rows <> 1) { //add one to the tally of trys mysql_query("UPDATE table SET number_of_trys = number_of_trys + 1 WHERE ip = '$REMOTE_ADDR'") or die(mysql_error()); } else { //display login form again } ?>

 
<?php
/* Have a table with an IP, timestamp and a number of trys column */
 
//connect to the database
mysql_connect(host, user, pass)
    or die("Couldnt connect to database");
mysql_select_db(db)
    or die("Couldnt select database");
 
$number_trys_allowed = 3; //set the amount of trys they're allowed
 
$timeoutseconds = 300; //equals 5 minutes
 
//get the time
$timestamp = time(); 
$timeout = $timestamp-$timeoutseconds; 
 
//delete any entries in the database that are over or equal to amount of trys allowed and have waited 5 minutes
mysql_query("DELETE FROM table WHERE timestamp < $timeout AND number_of_trys >= $number_trys_allowed ")
    or die(mysql_error());
 
//insert their IP into a database
mysql_query("INSERT INTO table SET ip = '$REMOTE_ADDR', number_trys = 0")
    or die(mysql_error());
    
//check their username and password attempt
$login = mysql_query("SELECT * FROM members_table WHERE username = '{$_POST['uname']}' AND password = '{$_POST['pass']}'")
    or die(mysql_error());
$num_rows = mysql_num_rows($login);
 
if($num_rows <> 1)
{
    //add one to the tally of trys
    mysql_query("UPDATE table SET number_of_trys = number_of_trys + 1 WHERE ip = '$REMOTE_ADDR'")
        or die(mysql_error());
}
else
{
    //display login form again
}
 
?>