incorrect password login causes 403 error | ww.wp.xz.cn

neilosj
(@neilosj)

7 years, 1 month ago

Hi,

When attempting, and failing, to log in as a regular user, the user is immediately faced with a 403 error.
Attempting the same process from a whitelisted IP allows further attempts to login.

I have removed the existing plugin in files, downloaded a fresh copy of v8.2 and uploaded these.
Clicked on the ‘Load default settings’ button on the Main Settings tab, this still happens.
Mode is set to Legacy
Attempts is 3 within 60 minutes, but this is ignored.

Viewing 2 replies - 1 through 2 (of 2 total)

Plugin Author gioni
(@gioni)

7 years ago

Hi!

Throwing the 403 error is the correct behavior. What do you expect instead?

Thread Starter neilosj
(@neilosj)

7 years ago

Hi,

Thanks for the reply.

This happens for the first failed attempt to log in, even when there is no blocks active on the site and the failed attempts is set to more than one.
Users only get one chance to log in correctly.

The 403 error is a little unfriendly for legitimate mistakes made by users.
Perhaps a blocked message using the sites template to say to users that this is locked due to multiple failed attempts to log in, try again in N minutes.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘incorrect password login causes 403 error’ is closed to new replies.

Tags

2 replies
2 participants
Last reply from: neilosj
Last activity: 7 years ago
Status: not a support question