[SYSTEMCONTROL] Logging the failed auth to auth.log #15

Closed
opened 2020-12-11 06:10:39 +01:00 by Ghost · 3 comments

Actually, the platform is loggin the success log in of users with auth-success occuracy in the auth.log file but not the failed auth. Should be better if the platform logs failed auth too, then we'll be able to check and take mesure against brut-force attacks with fail2ban.

Actually, the platform is loggin the success log in of users with auth-success occuracy in the auth.log file but not the failed auth. Should be better if the platform logs failed auth too, then we'll be able to check and take mesure against brut-force attacks with fail2ban.
Ghost added the
enhancement
master
labels 2020-12-11 06:10:39 +01:00
Author

The functionnality is implemented for auth log in, it only requires to do the same for failed log in the authSession() function located in the systemcontrol.php file.

The functionnality is implemented for auth log in, it only requires to do the same for failed log in the authSession() function located in the systemcontrol.php file.
Author

It's done. Platform logs failed auth now.It logs even if new guest session or not.

It's done. Platform logs failed auth now.It logs even if new guest session or not.
Ghost added the
fixed
label 2020-12-11 06:14:25 +01:00
Ghost referenced this issue from a commit 2020-12-11 06:15:34 +01:00
Author

Pushed to master

Pushed to master
Ghost closed this issue 2020-12-11 06:15:51 +01:00
Sign in to join this conversation.
No description provided.