From a60d7bf69fd7c29610cd5c3d456fe4aa4a01cd5f Mon Sep 17 00:00:00 2001 From: Whykioh Date: Sun, 12 Jul 2026 18:21:49 +0200 Subject: [PATCH] Fix login lockout message being silently overridden UserController::login() always echoed a generic "wrong credentials" message on failure, discarding whatever User::login() returned - so a locked-out account got the same message as a plain typo, with no way to tell the user to wait instead of retrying immediately. Co-Authored-By: Claude Sonnet 5 --- controllers/UserController.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/controllers/UserController.php b/controllers/UserController.php index c9bcb6e..4c6d395 100644 --- a/controllers/UserController.php +++ b/controllers/UserController.php @@ -64,7 +64,7 @@ class UserController { ]); } else { http_response_code(401); - echo json_encode(["success" => false, "message" => "Email ou mot de passe incorrect."]); + echo json_encode(["success" => false, "message" => $result['message'] ?? "Email ou mot de passe incorrect."]); } }