Use expiration . Once a user has logged in for the first time then set the expiration for that account to the required value....or set it when the counter is reached. Et voila, next time they try to login they can't (then you can do fancy extra stuff like telling them that their account has expired on the login window etc....) alan