// Flush the buffer, start displaying
} else {
ob_end_flush();
$login_output .= $login_preamble;
$login_output .= "<div class='alert alert-warning'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p><strong>Whoops!</strong> " . $res['message'] . "</p><aside class='ssmall'>Did you mean to <a href='?q=create' class='alert-link'>create a new account instead?</a> Or did you need to <a href='#' class='alert-link do-password-reset'>reset your password?</a></aside>\n<p class='small'>As a reminder, we require a password of at least {$minimum_password_length} characters with at least <strong>one upper case</strong> letter, at least <strong>one lower case</strong> letter, and at least <strong>one digit or special character</strong>.</p>\n </div>";
$failcount = intval($_POST['failcount']) + 1;
$loginform_whole = $loginform . "\n <input type='hidden' name='failcount' id='failcount' value='{$fail}'/>" . $loginform_close;
if ($failcount < 10) {
$login_output .= $loginform_whole;
} else {
$result = lookupItem($_POST['username'], 'username', null, null, false, true);
if ($result !== false) {
$userdata = mysqli_fetch_assoc($result);
$id = $userdata['id'];
}
$query = "UPDATE `{$default_user_table}` SET dtime=" . $user->microtime_float() . " WHERE id={$id}";
$query2 = "UPDATE `{$default_user_table}` SET disabled=true WHERE id={$id}";
$l = openDB();
$result1 = mysqli_query($l, $query);
if (!$result1) {
echo "<div class='alert alert-warning'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p>" . mysqli_error($l) . "</p></div>";
} else {
$result2 = execAndCloseDB($l, $query2);
if (!$result2) {
echo "<div class='alert alert-warning'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p>" . mysqli_error($l) . "</p></div>";
} else {
$login_output .= "<div class='alert alert-danger'><button type='button' class='close' data-dismiss='alert' aria-label='Close'><span aria-hidden='true'>×</span></button><p><strong>Sorry, you've had ten failed login attempts.</strong> Your account has been disabled for 1 hour.</p></div>";
}
}
}
}
