title: How to restrict a user after 3 consecutive unsuccessful attempts for login in Java Web App?
body: <p>I want to restrict a user after 3 consecutive unsuccessful attempts to login in my Web Application. Is it possible with only <code>HttpSession</code>, without any database operations? I am using Spring MVC, but not using <code>Spring-Security</code> for my web application. Please suggest me the way if it is possible.</p>