SessionLoginThrottle

[bwakad]

Error: Exception: Please wait at least 50 seconds before attempting another login. (in C:\xampp\htdocs\... etc.)

As I read through the forum I see it is to stop attemps of brute forcing which is good. But I would NOT like to display this message with the path and all on the front end.

So, how to stop it from displaying in front end (without turning it off)?

And, in case of login, I was thinking of using something as a counter:

Login (attempt 1)..

try and failed

Login (attempt 2)..

try and failed

Login (attempt 3)..

try and failed, redirect to recover login credentials

But what are the conditions. Is this based on a certain amount within a certain time frame? Or just in between logins a certain time?

[Martijn Geerts]

use the try & catch, out of the login code I gave you.

[bwakad]

Got it (must be halfblind). Sorry for that. It now displays nicely in a container at top of the form.

        try{            
            $u = $session->login($username, $password);
            if($u && $u->id) {
                $session->redirect("/members");
            }
        } catch(Exception $e) {
            $errorMessage .= "<li><b>" . $e->getMessage() . "</b></li>";
        }

[Martijn Geerts]

One more thing

Did you disable the trailing slash for the template for the page /member ? If you didn't, it's better to use the slash.

[bwakad]

Oh yeah... /members/ for the path you mean. Forgot about that. Good one!