User lockout - missing "picture below"
  • Vote Up1Vote Down pacijapacija
    Posts: 17Member
    Hi,

    one of my DJs locked himself out by means of typing incorrect password several times (confirmed also by me creating test account and locking it out). We are being presented with message "Type the characters you see in the picture below.". I guess this should be some kind of CAPTCHA, but there is no "picture below", much less characters in it.

    I found discussion from 2012 which addresses similar problem:
    https://forum.sourcefabric.org/discussion/14643/missing-captcha-fields-/p1

    I implemented the workaround (resetting the password and login_attempts directly through postgres), so I am not in urgent need of solving this. However, this looks like serious issue - imagine a malicious attacker constantly locking out DJs who then need to communicate with admins to remove the locks.
    Post edited by pacija at 2015-02-26 05:44:18
Add a Comment