From 7792bf6cea36ede6c38b9966f587222b476176cb Mon Sep 17 00:00:00 2001
From: kolaente <k@knt.li>
Date: Fri, 20 Mar 2026 10:07:34 +0100
Subject: [PATCH] refactor: use StatusAccountLocked for TOTP lockouts

---
 pkg/user/totp.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/user/totp.go b/pkg/user/totp.go
index 2f9314860..2a270deb1 100644
--- a/pkg/user/totp.go
+++ b/pkg/user/totp.go
@@ -196,7 +196,7 @@ func HandleFailedTOTPAuth(s *xorm.Session, user *User) {
 		log.Errorf("Could send password information mail to user %d after 10 failed TOTP attempts: %s", user.ID, err)
 		return
 	}
-	err = user.SetStatus(s, StatusDisabled)
+	err = user.SetStatus(s, StatusAccountLocked)
 	if err != nil {
 		log.Errorf("Could not disable user %d: %s", user.ID, err)
 	}