digiaonline/yii2-account

issue with isAccountPasswordExpired

Closed this issue · 1 comments

hi, nice extension.

there is a problem with the function isAccountPasswordExpired. it should choose one the last record (max (CreateDate)), and then compare passwordExpireTime.
Now selects all those that are older than passwordExpireTime - - always display form to change password

image

select within isAccountPasswordExpired returns:

SELECT * FROM `account_password_history` 
WHERE (`accountId`=1) AND (UNIX_TIMESTAMP() - UNIX_TIMESTAMP(createdAt) > 56400) 
ORDER BY `createdAt` DESC

image

p.s. it would be nice to add captcha on login form when login attempts exeed the module parameter...

I think I fixed this issue already. Could you please try the latest version? Thanks.