cwe-top25/Improper restriction of excessive authentication attemps/Mitigated/LogIn.java

import java.util.Scanner; 


public class LogIn {


public static void main(String[] args) {

//declare variables
String username, password;
int n = 0;

Scanner scanner = new Scanner (System.in);

 while (n<3) {
     
    //prompt user for their username
    System.out.print("Enter your username: ");  
    username = scanner.nextLine();

    //prompt user for their password
    System.out.print("Enter your password: ");  
    password = scanner.nextLine(); 
     
    
        if ("Justinfromcharleston@gmail.com".equals(username) && "secret17".equals(password)) 
        {  System.out.println("Welcome " + username + "!!!");
                break;
        }
        else if(!"secret17".equals(password) || !"Justinfromcharleston@gmail.com".equals(username)) {
           System.out.println("Incorrect login. Please try again.");
                n++;  
                
                  if (n==3){
                
                        System.out.print("Maximum login attemps exceeded.");  
                        break;
           }
        }
      
 
        }
 }
}