fix max invalid logins

Admidio · Nov 11, 2016 · f964d08 · f964d08
1 parent 8433cdb
commit f964d08
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/adm_program/system/classes/user.php b/adm_program/system/classes/user.php
@@ -341,17 +341,19 @@ public function checkLogin($password, $setAutoLogin = false, $updateSessionCooki
                 'dateInvalid'   => $this->getValue('usr_date_invalid', 'Y-m-d H:i:s')
             );
 
-            $this->clear();
-
             if ($this->getValue('usr_number_invalid') >= 3)
             {
                 $gLogger->warning('AUTHENTICATION: Maximum number of invalid login!', $loggingObject);
 
+                $this->clear();
+
                 return $gL10n->get('SYS_LOGIN_MAX_INVALID_LOGIN');
             }
 
             $gLogger->warning('AUTHENTICATION: Incorrect username/password!', $loggingObject);
 
+            $this->clear();
+
             return $gL10n->get('SYS_LOGIN_USERNAME_PASSWORD_INCORRECT');
         }