otwcode/otwarchive — pull request #1446 by aaronze (2013-11-25 11:48:22+00:00)
Title: Fixes the brute force attack vulnerability in user authentication

Fixes Issue 3856 and Issue 2580

Replaces pull request for 2580

Correctly suspends user's accounts on repeated failures (50 times) for 5 minutes, displays the time until suspension upon attempted logins. This fix only applies to the User's authentication sequence.

Also contains (and relies on) the code from 2580 where a log message is produced when the user has their account suspended. This code is pre-init-safe and should properly continue any suspensions in progress until their natural termination of 5 minutes.