Login Security blocks user login after X+1 attempts, not X attempts

Hi,

I have login security set to block the user after 3 attempts, but it actually blocks it after 4. A user can give three bad passwords and then a good password and get it. This code seems to be at fault (line 190):

if ($variables['%user_current_count'] > $variables['%user_block_attempts']) {

I suspect the ">" should be a ">=". The code at line 149 seems to have the same issue for notifications:

if ($variables['%tracking_current_count'] > $variables['%activity_threshold'] ) {

fyi.

thanks!

Joseph Cheek
ed.gov Drupal architect