Forgetting your password requires you to login ;)

[Paul]

There seems to be a problem with my attempting to log in using a username with a space in it. I swear I remember my password, but I couldn't get the thing to send me my password because it wanted me to log in.

Also, I hope that 5 out of 5 login things is optional per usergroup.

Paul :)

[Andy Z]

How can it be set per usergroup? vB doesn't know who you are when you're logged out.

[Mike Sullivan]

Can't reproduce this locally. What was the URL you were trying to retrieve your password from? It should be on login.php now.

[Paul]

Originally posted by andypotter
How can it be set per usergroup? vB doesn't know who you are when you're logged out.

Simple. If you try to log in as someone in the Administrator or Moderator usergroup, you start counting. If not, you don't count. Make it depend on the username.

I assume that the log in errors are stored along with the username anyway. I don't think it's something you'd want to be session dependant. I.e. you miss five times so you open up Netscape and get five more shots with a new session. Wouldn't be too great. Perhaps I should test that after I've had some sleep...

Paul

[Paul]

Originally posted by Ed Sullivan
Can't reproduce this locally. What was the URL you were trying to retrieve your password from? It should be on login.php now.

I just tried it again. A white screen appears saying "Temporary user login" or something to that effect and a log in box. Attempting to login again will result in another failed attempt.

Paul

[ToraTora!]

a space shouldnt matter because of the trim function for usernames, but it is exremely case sensative for the password protected forum. (needs the space in there to work)

[ToraTora!]

Originally posted by LoveShack


I assume that the log in errors are stored along with the username anyway. I don't think it's something you'd want to be session dependant. I.e. you miss five times so you open up Netscape and get five more shots with a new session. Wouldn't be too great. Perhaps I should test that after I've had some sleep...

Paul

older browsers will let you crack all day in a popup password protected setting. IE drops to the default 404 page after three attempts, so this again is something that could be troublesome regardless of a session setting.

[JamesUS]

We don't use password popups though.

IE won't have any problems with our password lockout routine as it doesn't even know that you're trying to log in. To IE you're just submitting a form a few times.

[Mike Sullivan]

Originally posted by LoveShack


I just tried it again. A white screen appears saying "Temporary user login" or something to that effect and a log in box. Attempting to login again will result in another failed attempt.
Oh, you meant AFTER you try to retrieve the password. I thought you meant the page where you enter your email address.