[Server-devel] errortoomanylogins

Joshua N Pritikin jpritikin at pobox.com
Tue Aug 4 03:59:24 EDT 2009


I'm not sure how, but one of our students triggered errortoomanylogins. 
Restarting the browser did not seem to help. Therefore, I removed the 
check.

Is this is sane thing to do?

What is the point of this check anyway? If I was going to try to guess a 
password then I would create a fresh cookie for every attempt.

diff --git a/lib/moodlelib.php b/lib/moodlelib.php
index a83110b..11f79ca 100644
--- a/lib/moodlelib.php
+++ b/lib/moodlelib.php
@@ -2383,11 +2383,6 @@ function update_login_count() {
     } else {
         $SESSION->logincount++;
     }
-
-    if ($SESSION->logincount > $max_logins) {
-        unset($SESSION->wantsurl);
-        print_error('errortoomanylogins');
-    }
 }
 
 /**


More information about the Server-devel mailing list