From a70f37a53eeeb57364d31bc8468906576f498c1f Mon Sep 17 00:00:00 2001 From: Shannon Date: Thu, 17 Nov 2016 16:46:06 +0100 Subject: [PATCH] U4-9185 lastLockoutDate does not get set when too many invalid password attempts are made --- src/Umbraco.Core/Security/BackOfficeUserStore.cs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/Umbraco.Core/Security/BackOfficeUserStore.cs b/src/Umbraco.Core/Security/BackOfficeUserStore.cs index c6714e256a..08c6f54dcf 100644 --- a/src/Umbraco.Core/Security/BackOfficeUserStore.cs +++ b/src/Umbraco.Core/Security/BackOfficeUserStore.cs @@ -644,6 +644,13 @@ namespace Umbraco.Core.Security { anythingChanged = true; user.IsLockedOut = identityUser.IsLockedOut; + + if (user.IsLockedOut) + { + //need to set the last lockout date + user.LastLockoutDate = DateTime.Now; + } + } if (user.Username != identityUser.UserName && identityUser.UserName.IsNullOrWhiteSpace() == false) {