Bug tracker

This ticket has been moved to our new tracker. Open Ticket PHPBB3-6892 now.

user_login_attempts should be set to 0 after confirming new password request (fix completed in vcs)

On my website, many users lost their password when i converted from 2.0 to Olympus.
They failed the max authorized attempts, then asked for new passwords.
But when they activated and try to login again, they had a first failed attempt because the captcha code has to be reproduced, so they thought that the new password isn't working... and sent many emails for support.

I think it's more logical to reinitialize this counter when they click on the activation link in the confirmation email, so i moded it like this :

OPEN ucp/ucp_activate.php
SEARCH
if ($update_password)
{
$sql_ary = array(
'user_actkey' => '',
'user_password' => $user_row['user_newpasswd'],
'user_newpasswd' => '',
'user_pass_convert' => 0,

AFTER, ADD
'user_login_attempts' => 0,

Comments / History

Posted by gbr1918 on Feb 1st 2008, 18:40

Hi I'm seeing something the same: the user has max logins. After the password is changed by admin in the ACP, user tries to login, completes the captcha and gets a 'you cannot log in without a password: contact your admin' message. Resetting the login-tries value to 0 in the database allows a normal login.
Dave

Linked ticket with changeset: r8881

Action performed by Anonymous (I am too lazy to register) on Sep 18th 2008, 14:50

Assigned ticket to user "Acyd Burn"

Action performed by Acyd Burn (Server Manager) on Sep 18th 2008, 14:50

Linked ticket with changeset: r8882

Action performed by Anonymous (I am too lazy to register) on Sep 18th 2008, 14:50

Changed ticket status from "New" to "Fix completed in SVN"

Action performed by Acyd Burn (Server Manager) on Sep 18th 2008, 14:51

Ticket details

Related SVN changesets