Long set up, but hope it helps get anyone in the know up to speed.

Built a site for an biomedical engineering company. (site environment info listed below)

end users buy access to permission based areas of the website. depending on what they purchase, they are added to groups which have unique permissions to access the corresponding area of site.

last thursday, 2 users have been locked out from being able to login. They have an inordinate # of logins (almost double the administrator account, which is virtually impossible to have logged in more than the site owner) I've spoken to one of the users who insists that he hasn't saved a password into a browser or anything. Both users are hospital employees accessing the site from hospital computers and their iPads. they are a part of a 31 person group, and are the only 2 who have an issue getting in.

Are there any phenomenon that might cause this? Any tips on where to start researching this or what is up??

(btw: this is not an April Fools Joke)




# concrete5 Version
5.5.2.1

# concrete5 Packages
eCommerce (2.8.3), Expand / Collapse (1.2.1), Extended Form (2.6), Fancy Image Links (1.2.8), kino's Import Users (1.2), Login (1.1), Mailing List (2.29), Popup Video (1.0.3.5), ProEvents (5.7.7), Vimeo Player (1.0.3), Zoom Image Dual (1.1).

# concrete5 Overrides
blocks/autonav, single_pages/register.php, themes/cabmet

# Server Software
Apache/2.0.64 (Unix) mod_ssl/2.0.64 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635

# Server API
cgi

# PHP Version
5.2.9