[Koha-bugs] [Bug 21311] Remove locked message from opac-auth.tt

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21311

--- Comment #5 from M. Tompsett <mtompset at hotmail.com> ---
Comment on attachment 80352
  --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=80352
Bug 21311: Remove locked message from opac-auth.tt

Review of attachment 80352:
 --> (https://bugs.koha-community.org/bugzilla3/page.cgi?id=splinter.html&bug=21311&attachment=80352)
-----------------------------------------------------------------

::: koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-auth.tt
@@ +57,5 @@
>                              [% END %]
>  
>  
> +                            [% IF invalid_username_or_password || too_many_login_attempts %]
> +                                <!-- This is what is displayed if user doesnt have permission or account is locked. (Do not expose more information than needed.) -->

This is a very good security step.

@@ -62,5 @@
> -                                This account has been locked!
> -                                [% IF Koha.Preference('OpacResetPassword') %]
> -                                    <a href="/cgi-bin/koha/opac-password-recovery.pl">You must reset your password</a>.
> -                                [% ELSE %]
> -                                    Please contact a library staff member.

I think adding the "Please contact a library staff member if you continue to
have problems." would be a good idea.

-- 
You are receiving this mail because:
You are watching all bug changes.