MyBB Community Forums

For some reason i could not login here with my normal account.
So i tried to get a new password and now i get this error every time.
For the last 2 days actually.




Thanks all DAMINK.

Does this happen on the login form in the header as well?

This is a known bug and should be fixed for the next release... I think sometimes when you try and login with the quick login form in the header, it sends you to that. Not 100% sure if it's when you enter it wrong, or if it always happens though...

so that means i cant use my id here anymore until the next release?
i hope none of my members encounter this.

Actually the more i think about this the more it worries me. If i was able to basically lock out my id from logging in here then could this be done in some malicious fashion?
Scary thought if its the case.

It should go once the lock out time for the incorrect password limit expires, but I'm not 100% on what causes this so that may be completely wrong. I know this happened on my localhost forum, and after about 30 mins, I could log in.

I waited a day and it was no better. Actually its been about 3 or 4 now.

(2008-12-29, 12:43 AM)DAMINK1 Wrote: [ -> ]Bugger so that means i cant use my id here anymore until the next release?
orange i hope none of my members encounter this.

Actually the more i think about this the more it worries me. If i was able to basically lock out my id from logging in here then could this be done in some malicious fashion?
Scary thought if its the case.

It only happens in rare cases and no, it can't be done in a malicious fashion. The remedy is simple. Simply clear your cookies and navigate to member.php?action=login directly. From there type in your username and leave the password blank. This will ensure the captcha shows up if you are indeed locked out. Once you've done that fill in the correct username, password and captcha.

So to reiterate, the only problem is if you've entered the wrong password 3 times in a row. Then on the 4th go you enter it the right time, but since MyBB has already detected that your over the max limit of 3, it makes you enter a captcha. It was however programmed incorrectly in the sense that the captcha wouldn't show up if you entered in the correct details. This has been corrected for 1.4.5 and there is even a public patch available here http://community.mybboard.net/thread-410...#pid279706

Not sure what or why but i tried again today and was able to login. And i was able to see the capture so im not really sure what is going on with this one. But for now i am able to login as normal.

EDIT

The first thing i tried was dumping cookies etc. Thats what threw me.
But thanks for helping everyone and hoping it wont happen again.
And great to hear its not a security problem as i thought for a second if this was possible anyone could attempt to login as a admin and effectively render his account useless....

Thanks again everyone for helping me.

(2008-12-29, 12:57 AM)DAMINK Wrote: [ -> ]And great to hear its not a security problem as i thought for a second if this was possible anyone could attempt to login as a admin and effectively render his account useless....

Even if they did attempt to login, it wouldn't affect access to the ACP, and even then all you'd have to do is write in the captcha or go directly into the db and reset the value (assuming you have permissions to do that as an admin)

Ok, looking at this I realize I posted a duplicate bug report. Sorry about that...but in terms of fixing your login, just delete your cookie for the site in question. I couldnt login with my username and password that I knew was 100% correct. Delete your cookie, it fixes it.