Also it should be inside the `OC_Config::getValue( "bruteforce", true)` condition, otherwise it would be a performance hit even if the bruteforce option is disabled.