mirror of
https://github.com/phpbb/phpbb.git
synced 2025-05-05 23:25:30 +02:00
Trigger error right away if user has exceeded login attempts instead of asking for the authentication data over and over again without accepting it even if it is correct.
git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@10432 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
f98ca7ce48
commit
04ce664604
@ -4003,6 +4003,11 @@ function phpbb_http_login($param)
|
|||||||
{
|
{
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
else if ($auth_result['status'] == LOGIN_ERROR_ATTEMPTS)
|
||||||
|
{
|
||||||
|
header('HTTP/1.0 401 Unauthorized');
|
||||||
|
trigger_error('NOT_AUTHORISED');
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// Prepend sitename to auth_message
|
// Prepend sitename to auth_message
|
||||||
|
Loading…
x
Reference in New Issue
Block a user