I know two things:
a) this happened on couple of different browsers... so its probably not cache related
b) I wasn't logged in but kept entering my password incorrectly
I think that after the warning the login form provides some communication takes place with the server and the user trying to enter information again causes again interferes with the script is redirecting back. This is just a guess. The error might be actually a good thing dettering attackes ... but I was just concerned if its gonna be issue when I have more users.
Thanks.
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
- Dean@dean
Dean - 0 likes
- Brett@brett.profitt
Brett - 0 likes
- Dean@dean
Dean - 0 likes
You must log in to post replies.I think this has to do with the .htaccess modification:
what I had was:
#RewriteRule ^([a-zA-Z0-9_-]+)$ pg/profile/$1
#RewriteRule ^([a-zA-Z0-9_-]+)/$ pg/profile/$1
RewriteRule ^([A-Za-z0-9\_\-]+)$ http://%{HTTP_HOST}/pg/profile/$1 [R]
I only use the third one now.
Remove the rule and see if it still happens.
I don't have the problem anymore and the rule has evolved since then.
I'm wondering... shouldn't elgg notify when there is a comment? usually this is done in the home page...