Brute force protection
You must log in or register to comment.
This would be per session, not lifetime.
Function naming could use some work then, it’s not obvious that
isFirstLoginAttemptwould be session-aware.Sorry, I’ll stop being pedantic now
This makes it even more cursed
