[xtremer360]

I came up with some ideas and was hoping you could look it over and see if you see anything still wrong with it. I think something is. When the user puts in the wrong credentials it correctly inserts a new row into the failed login attempts table however I can’t see the session variable established and increased each failed time and everything after that because after every failed attempt it always says incorrect username and password combination.

http://pastebin.com/M1iMaQmq

[Martyr2]

Of course you won't see the session when the login fails. You would only establish a session with a user if they have successfully logged in. Try logging in successfully and then check to see if you see the session established.

I think things are working correctly, you are just misinterpreting the outcome in a given situation. Now if you don't see the session started on a successful login, then there might be a problem.

[xtremer360]

With codeigniter a session is created when visited to the site. So yes a session is started.