diff --git a/system/pages/account/login.php b/system/pages/account/login.php index 98e85b464..3e8ebba35 100644 --- a/system/pages/account/login.php +++ b/system/pages/account/login.php @@ -42,7 +42,7 @@ } } - if($account_logged->isLoaded() && encrypt((USE_ACCOUNT_SALT ? $account_logged->getCustomField('salt') : '') . $login_password) == $account_logged->getPassword() && ($limiter->enabled && !$limiter->exceeded($ip)) + if($account_logged->isLoaded() && encrypt((USE_ACCOUNT_SALT ? $account_logged->getCustomField('salt') : '') . $login_password) == $account_logged->getPassword() && (!$limiter->enabled || !$limiter->exceeded($ip)) ) { if (setting('core.account_mail_verify') && (int)$account_logged->getCustomField('email_verified') !== 1) { @@ -82,10 +82,10 @@ $limiter->increment($ip); if ($limiter->exceeded($ip)) { $errorMessage = 'A wrong password has been entered ' . $limiter->max_attempts . ' times in a row. You are unable to log into your account for the next ' . $limiter->ttl . ' minutes. Please wait.'; - } + } $errors[] = $errorMessage; - + } } else {