Reputation
Next privilege 125 Rep.
Vote down
Badges
1
Newest
 Editor
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Nov
13
awarded  Editor
Nov
8
comment Login form authentication logic
If you are resetting failed_logins when the correct email + password are provided. Then even if they lock out the account for trying 5 wrong passwords, what if they get it right on the 10th try? You are letting them in, or if you aren't letting them in then how does failed_logins ever get reset?