When a user is currently in the database and user attempts to login with an invalid password it will overwrite the password in the database.

So secondary login attempts with the same incorrect password will be successful.

Patch supplied.

CommentFileSizeAuthor
incorrect-logins-still-logging-in.patch1.26 KBlang14

Comments

lang14’s picture

lang14 commented
Status: Patch (to be ported) » Needs review
davisben’s picture

davisben
Primary language English
Location NH, USA
commented
Status: Needs review » Closed (won't fix)

The 6.x-1.x branch is no longer supported. Please consider upgrading to the 6.x-2.x branch.