Skip to content

[ticket/13204] Tell user that password was incorrect when exceeding attempts#3068

Merged
nickvergessen merged 1 commit into
phpbb:develop-ascraeusfrom
marc1706:ticket/13204
Nov 21, 2014
Merged

[ticket/13204] Tell user that password was incorrect when exceeding attempts#3068
nickvergessen merged 1 commit into
phpbb:develop-ascraeusfrom
marc1706:ticket/13204

Conversation

@marc1706

Copy link
Copy Markdown
Member

@marc1706 marc1706 added this to the 3.1.1 milestone Oct 26, 2014
@nickvergessen

Copy link
Copy Markdown
Contributor

The idea of not telling the password was wrong is, to not let hackers continue to bruteforce the attack until they got the password. So im not sure this is a good idea

@bantu

bantu commented Oct 26, 2014

Copy link
Copy Markdown
Collaborator

Not sure an extra language entry is needed. If the CAPTCHA is incorrect, say so. Otherwise, if the password is incorrect, say so.

…ttempts

At the end of the login method, the captcha was entered correctly and only
the password was incorrect. Therefore, just tell the user that the password
was incorrect. He will see that he still needs to enter a captcha.

PHPBB3-13204
@marc1706

marc1706 commented Nov 2, 2014

Copy link
Copy Markdown
Member Author

Updated to use the old language entry for telling the user that the password is wrong.

nickvergessen added a commit to nickvergessen/phpbb that referenced this pull request Nov 21, 2014
[ticket/13204] Tell user that password was incorrect when exceeding attempts
@nickvergessen
nickvergessen merged commit 0868831 into phpbb:develop-ascraeus Nov 21, 2014
@marc1706
marc1706 deleted the ticket/13204 branch June 16, 2015 12:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants