I exceeded the maximum allowed number of login attempts?

[Saltine]

I get this every once in a while when I try to log in:

You exceeded the maximum allowed number of login attempts. In addition to your username and password you now also have to enter the confirm code from the image you see below.

But there's no confirm code or image or place for me to enter any such thing. The only way I can get in is to make a password change request, and then go through that whole thing. It's pretty annoying.

Anyone else see this? Or is it just me and someone's trying to log in as me without knowing my password? What's with the erroneous "confirm code" stuff?

[PonderThis]

OK, I've done some poking around. Some things I do know:

1. Your login cookie expires from time to time. When it happens, you have to manually log back in. Assuming you check the "Remember Me" box you shouldn't have to worry about it until it expires again.
2. After a certain number of unsuccessful login attempts the board software will do add CAPTCHA confirmation to your login. There is no admin setting for this behavior.
3. For some reason after your cookie expires the board thinks you've also exceeded your unsuccessful login attempts. I've bumped the "certain number" from 3 to 5 but I don't think that'll actually change anything since this seems to be the result of something happening internal to the board.
4. Spamusers style doesn't present that CAPTCHA.

As for item 1, I don't know why the cookies expire like that. They're supposed to only expire if you've not logged in for a certain amount of time but this is not what is happening.
As to items 2 and 3, I'll have to look at phpBB.com and see what I can find.
As to item 4, I'll investigate how this got left off of the Spamusers style and add it in.

[EvilJekyll]

Yay, I can haz log in after 3-4 days of not being able to.

[PonderThis]

Well dang nothing about this is straightforward AT ALL. I've been code diving and I've got tantalizing little bits and pieces here and there but no answers. This may take me quite some time to figure out.

Meanwhile anybody still having trouble logging in drop me a line at PonderThis (at) (thisurl.com). I'm usually terrible about checking email regularly so I'll try and be better at checking my mail more often.

[chrismachine]

You're awesome for doing this stuff.

[MysticalDescent]

You're awesome for doing this stuff.

Seconded.

[PonderThis]

Hmmm, not seeing a lot of activity on the boards. IF ANYONE IS HAVING TROUBLE LOGGING IN — SERIOUSLY — EMAIL ME!!!

(you know who) (at) spamusers.com

[Null]

Hmmm, not seeing a lot of activity on the boards.

Yeah, well...

[PonderThis]

Hmmm, not seeing a lot of activity on the boards.

Yeah, well...

Awwwww

[PonderThis]

SOME NEWS

Still haven't figured out how to fix the missing captcha. But I have figured out how to manhandle the database to fix anybody with this problem. I just went through and cleared out a bunch of you. Apparently many phpBB boards are having this problem and it is seemly related to mass spam attacks although I'm a bit hazy on the details.

Binks brought this latest round of max login problems to my attention so thank you Binks and check your email! I sorta reset your password while I was trying to figure stuff out.

If anyone still has any problems with this EMAIL ME and I will try to fix stuff.

[Binkatron5000]

Thank YOU Ponderpants! Wheeee!

[sum yun gai]

Ponderpants!

if i had admin powers i would totally change his tagline to this