Uploaded image for project: 'CMS'
  1. CMS
  2. CMS-5526

Captcha: Too many attemps

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Major Major
    • 3.7, 3.9
    • None
    • None
    • None

      The Captcha appears when there is 3 or more attempts in a row for a login.
      This number of attempts is recorded in a new table : Users_FormConnectionFailed.

      When the login is successfully connected, this number of attempts is deleted of the table.

      This number of attempts is also deleted when the last attempts is too old.

        1. Captcha_CMS_v2.patch
          9 kB
        2. Captcha_runtime_v2.patch
          15 kB

          [CMS-5526] Captcha: Too many attemps

          Laurence Aumeunier made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: Reopened [ 4 ] New: Closed [ 6 ]

          Laurence Aumeunier added a comment -

          So finally it is not a bug.

          Laurence Aumeunier added a comment - So finally it is not a bug.

          Laurence Aumeunier added a comment - - edited

          Very specific use case for this reopened. This is the way to reproduce it:

          • Try to connect with same wrong login 3 times
          • The captcha appears
          • Then enter a valid login and password without filling captcha
            As with this valid login it is the first attempt, the captcha is not checked and the connection succeeds.

          For the second remark "And he disappears when we enter fake login with fake password.", this is a normal behavior. The attempts' counter is incremented for each tested login. If you try to connect with a new login, the counter is set to 0 and the captcha does not appears.

          Laurence Aumeunier added a comment - - edited Very specific use case for this reopened. This is the way to reproduce it: Try to connect with same wrong login 3 times The captcha appears Then enter a valid login and password without filling captcha As with this valid login it is the first attempt, the captcha is not checked and the connection succeeds. For the second remark "And he disappears when we enter fake login with fake password.", this is a normal behavior. The attempts' counter is incremented for each tested login. If you try to connect with a new login, the counter is set to 0 and the captcha does not appears.
          Loïc Bouchet made changes -
          Resolution Original: Fixed [ 1 ]
          Status Original: Resolved [ 5 ] New: Reopened [ 4 ]

          Loïc Bouchet added a comment -

          With "privilégier la sécurité", Captcha appears after 3 attempts but he is useless for the connection.
          And he disappears when we enter fake login with fake password.

          Loïc Bouchet added a comment - With "privilégier la sécurité", Captcha appears after 3 attempts but he is useless for the connection. And he disappears when we enter fake login with fake password.
          Raphaël Franchet made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]
          Raphaël Franchet made changes -
          Fix Version/s New: 3.6 [ 11785 ]
          Fix Version/s New: 3.7_LTE [ 11927 ]
          Raphaël Franchet made changes -
          Link New: This issue Référence RUNTIME-1047 [ RUNTIME-1047 ]
          Raphaël Franchet made changes -
          Link Original: This issue Est bloqué par RUNTIME-1047 [ RUNTIME-1047 ]
          Loïc Bouchet made changes -
          Link New: This issue Est bloqué par RUNTIME-1047 [ RUNTIME-1047 ]

            Unassigned Unassigned
            lbouchet Loïc Bouchet
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: