Back porting to 1.9.x: Forgot password form IP-based lockout locks

everyone from using it - TRUNK-3878 author:chalakanth
openmrs · Sep 12, 2013 · 97f38e2 · 97f38e2
1 parent a66acae
commit 97f38e2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/src/main/java/org/openmrs/web/controller/ForgotPasswordFormController.java b/web/src/main/java/org/openmrs/web/controller/ForgotPasswordFormController.java
@@ -77,7 +77,7 @@ protected ModelAndView onSubmit(HttpServletRequest request, HttpServletResponse
 
 		String username = request.getParameter("uname");
 
-		String ipAddress = request.getLocalAddr();
+		String ipAddress = request.getRemoteAddr();
 		Integer forgotPasswordAttempts = loginAttemptsByIP.get(ipAddress);
 		if (forgotPasswordAttempts == null)
 			forgotPasswordAttempts = 1;