diff --git a/include/class.auth.php b/include/class.auth.php index b88201b77a893ddd9bbc8e439881f83258c6e3ba..b5de88a11852e0f4e3636b1921de49dd05b77a99 100644 --- a/include/class.auth.php +++ b/include/class.auth.php @@ -550,8 +550,8 @@ class StaffAuthStrikeBackend extends AuthStrikeBackend { $ost->logWarning('Excessive login attempts ('.$username.')', $alert, $cfg->alertONLoginError()); return new AccessDenied('Forgot your login info? Contact Admin.'); - //Log every other failed login attempt as a warning. - } elseif($authsession['strikes']%2==0) { + //Log every other third failed login attempt as a warning. + } elseif($authsession['strikes']%3==0) { $alert='Username: '.$username."\n" .'IP: '.$_SERVER['REMOTE_ADDR']."\n" .'TIME: '.date('M j, Y, g:i a T')."\n\n" @@ -595,7 +595,7 @@ class UserAuthStrikeBackend extends AuthStrikeBackend { 'Attempts #'.$authsession['strikes']; $ost->logError('Excessive login attempts (user)', $alert, ($cfg->alertONLoginError())); return new AccessDenied('Access Denied'); - } elseif($authsession['strikes']%2==0) { //Log every other failed login attempt as a warning. + } elseif($authsession['strikes']%3==0) { //Log every other third failed login attempt as a warning. $alert='Login: '.$username.': '.$password."\n".'IP: '.$_SERVER['REMOTE_ADDR']. "\n".'TIME: '.date('M j, Y, g:i a T')."\n\n".'Attempts #'.$authsession['strikes']; $ost->logWarning('Failed login attempt (user)', $alert);