| @@ -93,9 +93,10 @@ | ||
| 93 | 93 | && c_ws_plugin__s2member_utils_conds::pro_is_installed() |
| 94 | 94 | && c_ws_plugin__s2member_pro_remote_ops::is_remote_op('auth_check_user') |
| 95 | 95 | ) $ip = $GLOBALS['s2member_pro_remote_op_auth_check_user_ip']; |
| 96 | 96 | |
| 97 | - if((int)get_transient('s2m_ipr_'.md5('s2member_transient_failed_login_attempts_'.$ip)) > $max) | |
| 97 | + //260902.0444 The transient counts failures already completed; reaching the configured allowance means the next authentication must be blocked. | |
| 98 | + if((int)get_transient('s2m_ipr_'.md5('s2member_transient_failed_login_attempts_'.$ip)) >= $max) | |
| 98 | 99 | { |
| 99 | 100 | $exp_secs = strtotime('+'.apply_filters('ws_plugin__s2member_track_failed_logins__exp_time', '30 minutes', get_defined_vars())) - time(); |
| 100 | 101 | // If you add Filters to this value, you should use a string that is compatible with PHP's strtotime() function. |
| 101 | 102 | |
