2.4.1 - fix bruteforce countermeasure to avoid a logout in certain circumstances
Posted: Tue Jan 05, 2021 12:27 am
Released 2.4.1
If a fake session presented, then also the legit logged in user were logged out, due to session deletion for the passed UID.
It has been fixed.
More specifically, when an user account were detected as bruteforced, the code was following with a logout, that is based than by (cookie) ID.== Changelog ==
= 2.4.1 =
*Release Date - 5 Jan, 2021*
* Fix Bruteforce countermeasure, to avoid logout of the legit logged user in certain cases
If a fake session presented, then also the legit logged in user were logged out, due to session deletion for the passed UID.
It has been fixed.