Posted on: 6/25/2015 1:48:57 PM | Views : 980

Hello,
Using the SqlMembershipProvider, I'm trying to have a blank password count as a Failed password attempt. However, when I pass "" as a password string to ValidateUser, the database value is not incremented. Any other value such as "." will cause the value to increment correctly. Is this by design? If so, is there a way to change this behavior?
I currently have if (password  == "") { password = "."; } as a cheap workaround, but this is not what I'd consider a good solution. 
Method in question: SqlMembershipProvider.ValidateUser(string username, string password)
Thanks.

Go to the complete details ...