MPOS / php-mpos

    }

    $this->setErrorMessage("Invalid username or password");

    $this->log->log('error', "Authentication failed for $username");

    if ($id = $this->getUserId($username)) {

      $this->incUserFailed($id);

      // Check if this account should be locked

      if (isset($this->config['maxfailed']['login']) && $this->getUserFailed($id) >= $this->config['maxfailed']['login']) {

        $this->setLocked($id, 1);

        $this->log->log("warn", "$username locked due to failed logins, saved is [".$this->getUserIp($this->getUserId($username))."]");

        if ($token = $this->token->createToken('account_unlock', $id)) {

          $aData['token'] = $token;

          $aData['username'] = $username;

          $aData['email'] = $this->getUserEmail($username);

          $aData['subject'] = 'Account auto-locked';

          $this->mail->sendMail('notifications/locked', $aData);

        }

      }

    }

    return false;

  }

    $this->log->log('info', $this->getUserName($userId).' incorrect pin');

    $this->incUserPinFailed($userId);

    // Check if this account should be locked

    if (isset($this->config['maxfailed']['pin']) && $this->getUserPinFailed($userId) >= $this->config['maxfailed']['pin']) {

      $this->setLocked($userId, 1);

      $this->log->log("warn", $this->getUserName($userId)." was locked due to incorrect pins");

      if ($token = $this->token->createToken('account_unlock', $userId)) {

        $username = $this->getUserName($userId);

        $aData['token'] = $token;

        $aData['username'] = $username;

        $aData['email'] = $this->getUserEmail($username);

        $aData['subject'] = 'Account auto-locked';

        $this->mail->sendMail('notifications/locked', $aData);

      }

      $this->logoutUser();

    }

    return false;

  }