CAPTCHA ???

Message

Wolfghost · #1 Post by **Wolfghost** » Tue Dec 28, 2010 1:42 pm

I'v logged in first time to forum today and get this shit

You exceeded the maximum allowed number of login attempts. In addition to your username and password you now also have to solve the CAPTCHA below.

Something new I don't know about ?!?!?

guinness · #2 Post by **guinness** » Tue Dec 28, 2010 1:51 pm

C'mon we're not kids on TPFC, there is no need to swear! The problem has been noted and I am sure a FIX will appear in the next couple of days.

Wolfghost · #3 Post by **Wolfghost** » Tue Dec 28, 2010 1:57 pm

Thanks

#4 Post by **Andrew Lee** » Thu Dec 30, 2010 2:17 am

I am not sure what's going on. Any phpBB3 expert want to enlighten me? Is this like an end-of-the-year easter egg, or is someone trying to hack into accounts here?

Anyway, I encountered the same message when I logged out and try to log in again. But after solving the CAPTCHA once, it seemed to have gone for good.

m^(2) · #5 Post by **m^(2)** » Thu Dec 30, 2010 4:36 am

I got problems logging in, after entering my password the logging page would just refresh. After several trials I cleared the cookies. After this I tried again, I was prompted with captcha. Filled it and everything went fine.

SYSTEM · #6 Post by **SYSTEM** » Thu Dec 30, 2010 6:23 am

On the contrary, I have had no trouble logging in.

guinness · #7 Post by **guinness** » Thu Dec 30, 2010 7:04 am

It seems the problem is very sporadic!

I am Baas · #8 Post by **I am Baas** » Thu Dec 30, 2010 3:36 pm

Got this today on my first login attempt.

#9 Post by **Andrew Lee** » Fri Dec 31, 2010 3:14 am

I did a search on the error message and found that some phpBB3 sites have also encountered this problem. As such, I am guessing it's due to the new phpBB version (3.0.

instead of any of the anti-spam mods.

Wolfghost · #10 Post by **Wolfghost** » Fri Dec 31, 2010 6:05 am

My first login attempt today get me CAPTCHA again !!!

Ruby · #11 Post by **Ruby** » Fri Dec 31, 2010 10:05 am

Same here, first login.

#12 Post by **Andrew Lee** » Mon Jan 03, 2011 4:31 pm

Login this morning without encountering the CAPTCHA message.

I sat down and analyzed the phpbb3 source code for a bit. Seems like this behaviour is triggered for a particular user account when there has been >13 consecutive unsuccessful login attempts. This is recorded in the "phpbb3_users" table under the "user_login_attempts" field, and checked in "includes/auth/auth_db.php".

Did a search for user accounts matching this profile, and so far only one turned up: thoubugyou.

I suspect a bot is going through phpbb3 boards and trying to break in by guessing the password. Though I am not sure how successful it can be with only 13 attempts for each user account.

Very strange...

Firewrath · #13 Post by **Firewrath** » Mon Jan 03, 2011 10:22 pm

Yeeees,.... strange, *nods* cause its not like some of us have simple 6 letter passwords or anything, ...that would be silly, ...and wrong, *ahem*

*changes PW*

and Yes, i know better,

but this site never had problems before and i like being able to remember my password w/o opening keepass,

guinness · #14 Post by **guinness** » Tue Jan 04, 2011 2:01 am

Yeeees,.... strange, *nods* cause its not like some of us have simple 6 letter passwords or anything, ...that would be silly, ...and wrong, *ahem*
*changes PW*

Though I am not sure how successful it can be with only 13 attempts for each user account.

It it's a 6 character password maybe 1 hour >> http://howsecureismypassword.net/

Emka · #15 Post by **Emka** » Tue Jan 04, 2011 7:31 am

I've just logged in and I also was prompted with the CAPTCHA thing.

The Portable Freeware Collection Forums

CAPTCHA ???

CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???

Re: CAPTCHA ???