The Captcha appears when there is 3 or more attempts in a row for a login.
This number of attempts is recorded in a new table : Users_FormConnectionFailed.
When the login is successfully connected, this number of attempts is deleted of the table.
This number of attempts is also deleted when the last attempts is too old.
- Référence
-
RUNTIME-1047 Captcha : Files' migration.
-
- Closed
-
[CMS-5526] Captcha: Too many attemps
Very specific use case for this reopened. This is the way to reproduce it:
- Try to connect with same wrong login 3 times
- The captcha appears
- Then enter a valid login and password without filling captcha
As with this valid login it is the first attempt, the captcha is not checked and the connection succeeds.
For the second remark "And he disappears when we enter fake login with fake password.", this is a normal behavior. The attempts' counter is incremented for each tested login. If you try to connect with a new login, the counter is set to 0 and the captcha does not appears.
Laurence Aumeunier
added a comment - - edited Very specific use case for this reopened. This is the way to reproduce it:
Try to connect with same wrong login 3 times
The captcha appears
Then enter a valid login and password without filling captcha
As with this valid login it is the first attempt, the captcha is not checked and the connection succeeds.
For the second remark "And he disappears when we enter fake login with fake password.", this is a normal behavior. The attempts' counter is incremented for each tested login. If you try to connect with a new login, the counter is set to 0 and the captcha does not appears. With "privilégier la sécurité", Captcha appears after 3 attempts but he is useless for the connection.
And he disappears when we enter fake login with fake password.
So finally it is not a bug.