passwords

[scott]

Hey everyone,
Sorry to hear about all the trouble. I do not know exactly what's going, but here's what I do know:

1. It is not a hacker fishing for passwords
2. It is not a virus or malware
3. It has nothing to do with the recent IP searching problem

My best guess is it is simply a bug in a phpBB password security enhancement that I installed about a year ago. This modification provides many useful features, including but not limited to:

a. requiring that passwords must be at least 6 characters long
b. blocking access to an account for 15 minutes after 4 failed login attempts
c. ensuring that you can't choose a password that's the same as your username
d. etc.

At this point, however, because of all the other changes I've made it would be far less than trivial to back it out. And even if the password timeout feature has bugs, I believe the other features have merit. So in the meantime I will increase the password timeout as far as it will go (27 years). That should hopefully fix the problem until I have time to address it in more detail. :-)

If anyone continues to have this kind of trouble though, please let me know.

Thanks,
Scott

[Jonathan]

Thanks!