Simplify the bad password stuff; Just look for a consectutive sequence
of bad passwords and freeze the user after 15 attempts, or the IP after 25 attempts.
Please register or sign in to comment
of bad passwords and freeze the user after 15 attempts, or the IP after 25 attempts.