// Flush the buffer, start displaying } else { ob_end_flush(); $login_output .= $login_preamble; $login_output .= "<div class='alert alert-warning'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p><strong>Whoops!</strong> " . $res['message'] . "</p><aside class='ssmall'>Did you mean to <a href='?q=create' class='alert-link'>create a new account instead?</a> Or did you need to <a href='#' class='alert-link do-password-reset'>reset your password?</a></aside>\n<p class='small'>As a reminder, we require a password of at least {$minimum_password_length} characters with at least <strong>one upper case</strong> letter, at least <strong>one lower case</strong> letter, and at least <strong>one digit or special character</strong>.</p>\n </div>"; $failcount = intval($_POST['failcount']) + 1; $loginform_whole = $loginform . "\n <input type='hidden' name='failcount' id='failcount' value='{$fail}'/>" . $loginform_close; if ($failcount < 10) { $login_output .= $loginform_whole; } else { $result = lookupItem($_POST['username'], 'username', null, null, false, true); if ($result !== false) { $userdata = mysqli_fetch_assoc($result); $id = $userdata['id']; } $query = "UPDATE `{$default_user_table}` SET dtime=" . $user->microtime_float() . " WHERE id={$id}"; $query2 = "UPDATE `{$default_user_table}` SET disabled=true WHERE id={$id}"; $l = openDB(); $result1 = mysqli_query($l, $query); if (!$result1) { echo "<div class='alert alert-warning'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p>" . mysqli_error($l) . "</p></div>"; } else { $result2 = execAndCloseDB($l, $query2); if (!$result2) { echo "<div class='alert alert-warning'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p>" . mysqli_error($l) . "</p></div>"; } else { $login_output .= "<div class='alert alert-danger'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p><strong>Sorry, you've had ten failed login attempts.</strong> Your account has been disabled for 1 hour.</p></div>"; } } } }