ok Mike i can see why you would add resolve IP and if its ok I'll add that to loginlog.php but the link to edit the members profile I don't understand. Why do you need to check for failed logins then go to edit the member info?

Scott

Very useful! Installed easily! Thanks!

[QUOTE]Originally posted by PPN
ok Mike i can see why you would add resolve IP and if its ok I'll add that to loginlog.php but the link to edit the members profile I don't understand. Why do you need to check for failed logins then go to edit the member info?

Scott

Updated to accomodate for Mike's changes.

Hey how do you create a table?

Is it a query?

Umm, yeah, it's a query.

If you have phpMyAdmin, here's a short how to:

* Log into phpMyAdmin
* Click in the menu on the left on the database you want to open
* In the screen on the right, scroll down untill you see:
Run SQL query/queries on database <database-name>
* Copy the entire bit from the install txt file starting with:
CREATE TABLE
and ending with:
);
and paste it into the text field below the Run SQL query
* Click go, and you'll have your loginlog table :)

THanks bud! ;)

Just reporting back. :)

So far we have had 66 failed logins tries.
About 20 of them are by one member, who was banned, but thought he had forgotten his password or something. So sad...

Anyway, while looking at these logins it occurred to me that all of these passwords they're trying are probably passwords they use on other sites.
Just a thought.

yeah I thought of this hoped that limiting it to trusted admins would minimise this, they had access to see users passwords before 2.2.x
I didn't plan it on someone who was banned trying passwords, I was thinking of people trying to brute force accounts.

Reports for my forums are

6 failed logins

4 were for admin users and 2 was someone trying to guess a password.

guys how can i use this hack to log all the logins with time, date and ip adress for each user.

thanks in advance.