mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #4780 from AxelRb/master 

On an auth failure the uid and the IP address should be logged to the st...
This commit is contained in:
Morris Jobke 2013-10-10 07:21:36 -07:00
parent 4c166fa361 9b0454380c
commit 0641365a10
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
config/config.sample.php
View File

@ -148,6 +148,9 @@ $CONFIG = array(
(watch out, this option can increase the size of your log file)*/ (watch out, this option can increase the size of your log file)*/
"log_query" => false, "log_query" => false,
/* Enable or disable the logging of IP addresses in case of webform auth failures */
"log_authfailip" => false,
/* /*
* Configure the size in bytes log rotation should happen, 0 or false disables the rotation. * Configure the size in bytes log rotation should happen, 0 or false disables the rotation.
* This rotates the current owncloud logfile to a new name, this way the total log usage * This rotates the current owncloud logfile to a new name, this way the total log usage

7
lib/base.php
View File

@ -760,6 +760,13 @@ class OC {
// logon via web form // logon via web form
elseif (OC::tryFormLogin()) { elseif (OC::tryFormLogin()) {
$error[] = 'invalidpassword'; $error[] = 'invalidpassword';
if ( OC_Config::getValue('log_authfailip', false) ) {
OC_Log::write('core', 'Login failed: user \''.$_POST["user"].'\' , wrong password, IP:'.$_SERVER['REMOTE_ADDR'],
OC_Log::WARN);
} else {
OC_Log::write('core', 'Login failed: user \''.$_POST["user"].'\' , wrong password, IP:set log_authfailip=true in conf',
OC_Log::WARN);
}
} }
OC_Util::displayLoginPage(array_unique($error)); OC_Util::displayLoginPage(array_unique($error));