Is there a way that when someone logs in and they provide the correct email address but not the correct password to tell them "Sorry your password is not correct."? Giving them the option to click on Forgot My Password.

Or to put the email address back in the email field.

Then is there a way to restrict/disable a login if someone has tried to login 3 times and failed?

Terry

I am days away from launching a new site on SS and I'm totaly excited about all that can be done with SS. Great job who ever conceived SS.

Terry,

There is some functionality along the lines of disabling login for a given username after so many failed login attempts. It doesn't appear to be mentioned on the docs site but you can find it mentioned in the api docs. For more understanding of how it works, you might want to look at the source of class Member.

I've never used this feature....

Hope this helps,
Ben

Terry,

"...but how do you (I wonder) update the record to reflect enabled. "

Are you wondering how to go into the admin interface and unlock a locked account?

Ben

Terry,

If you're wanting a way to manually clear the lock out, you might try poking around in class Member's source, particularly looking at getCMSFields(). That method currently hides the "LockedOutUntil" field.

Hope this helps,
Ben