title: How to lock user account on 5 unsuccessful attempts
body: <p>I have a website developed using asp.net/C#. I would like to lock an user account on 5 consecutive login failures within a time period of 30 minutes. I do not want to do this on database side. And I know this is cannot be done by session variables. I also do not want to use cookies for this, as a user can easily disable cookies.</p>
  
  <p>Is there a perfect way to do this with above limitations?</p>