From bugzilla-daemon@bugs.koha-community.org Wed Oct 10 18:06:07 2018
From: bugzilla-daemon@bugs.koha-community.org
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 21311] Remove locked message from opac-auth.tt
Date: Wed, 10 Oct 2018 16:06:04 +0000
Message-ID: <bug-21311-70-rDRrkCxxZS@https.bugs.koha-community.org/bugzilla3/>
In-Reply-To: <bug-21311-70@https.bugs.koha-community.org/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7289537531938959226=="

--===============7289537531938959226==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D21311

--- Comment #5 from M. Tompsett <mtompset@hotmail.com> ---
Comment on attachment 80352
  --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=3D80352
Bug 21311: Remove locked message from opac-auth.tt

Review of attachment 80352:
 --> (https://bugs.koha-community.org/bugzilla3/page.cgi?id=3Dsplinter.html&b=
ug=3D21311&attachment=3D80352)
-----------------------------------------------------------------

::: koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-auth.tt
@@ +57,5 @@
>                              [% END %]
> =20
> =20
> +                            [% IF invalid_username_or_password || too_many=
_login_attempts %]
> +                                <!-- This is what is displayed if user doe=
snt have permission or account is locked. (Do not expose more information tha=
n needed.) -->

This is a very good security step.

@@ -62,5 @@
> -                                This account has been locked!
> -                                [% IF Koha.Preference('OpacResetPassword')=
 %]
> -                                    <a href=3D"/cgi-bin/koha/opac-password=
-recovery.pl">You must reset your password</a>.
> -                                [% ELSE %]
> -                                    Please contact a library staff member.

I think adding the "Please contact a library staff member if you continue to
have problems." would be a good idea.

--=20
You are receiving this mail because:
You are watching all bug changes.

--===============7289537531938959226==--