|visits||member for||2 years, 9 months|
|seen||Nov 29 '12 at 20:55|
Login form authentication logic
If you are resetting failed_logins when the correct email + password are provided. Then even if they lock out the account for trying 5 wrong passwords, what if they get it right on the 10th try? You are letting them in, or if you aren't letting them in then how does failed_logins ever get reset?