Limiting htaccess failure attempts

They have: 17 posts

Joined: May 2000

In helping people make their site better, I came across a web-based script that creates .htaccess & .htpasswd files. When using Apache Authentication (and to help make it easier for people not familiar with this feature), it dawned on me that there must be a way to limit the number of failed attempts.

In followng the K.I.S.S. principle, I had thought (hoped) it would be in the htaccess file, somewhere within:

< Limit GET POST >
require
< /Limit >

(spacing is for vBulletin)

but I cannot seem to find any documentation on it. Spent time browsing and although HARD_SERVER_LIMIT & kill_conditions (under Apache API Contstants) sound promising, I am not familiar enough to understand their usage.

Can anyone help shed some light on this?