diff options
author | mkanat%bugzilla.org <> | 2009-12-13 21:46:24 +0100 |
---|---|---|
committer | mkanat%bugzilla.org <> | 2009-12-13 21:46:24 +0100 |
commit | 72cb2bc73e71f54c2223bb78af29fee888590b53 (patch) | |
tree | 45aacc0944bd4b7d4b7391b0bff7bc67b15c722e /template/en/default/global | |
parent | cb4a8bf4954c38d06358c4a7509f3fac6fb1e705 (diff) | |
download | bugzilla-72cb2bc73e71f54c2223bb78af29fee888590b53.tar.gz bugzilla-72cb2bc73e71f54c2223bb78af29fee888590b53.tar.xz |
Bug 355283: Lock out a user account on a particular IP for 30 minutes if they fail to log in 5 times from that IP.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
Diffstat (limited to 'template/en/default/global')
-rw-r--r-- | template/en/default/global/user-error.html.tmpl | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/template/en/default/global/user-error.html.tmpl b/template/en/default/global/user-error.html.tmpl index c4602f7d8..1d72fbd71 100644 --- a/template/en/default/global/user-error.html.tmpl +++ b/template/en/default/global/user-error.html.tmpl @@ -77,6 +77,12 @@ that login name. [% END %] + [% ELSIF error == "account_locked" %] + [% title = "Account Locked" %] + Your IP ([% ip_addr FILTER html %]) has been locked out of this + account until [% unlock_at FILTER time %], as you have + exceeded the maximum number of login attempts. + [% ELSIF error == "alias_has_comma_or_space" %] [% title = "Invalid Characters In Alias" %] The alias you entered, <em>[% alias FILTER html %]</em>, @@ -962,6 +968,15 @@ [% ELSIF error == "invalid_username_or_password" %] [% title = "Invalid Username Or Password" %] The username or password you entered is not valid. + [%# People get two login attempts before being warned about + # being locked out. + #%] + [% IF remaining <= 2 %] + If you do not enter the correct password after + [%+ remaining FILTER html %] more attempt(s), you will be + locked out of this account for + [%+ constants.LOGIN_LOCKOUT_INTERVAL FILTER html %] minutes. + [% END %] [% ELSIF error == "json_rpc_post_only" %] For security reasons, you may only use JSON-RPC with the POST |