User access logging

[Scott MacVicar]

why would you want to log the loginpass, it would have been already checked in member.php at the top and it would also compromise security and defeat the purpose of md5 thoughout the 2.2.x series.

Though the simpliest way to check if its a cookied login or not is the fact that the cookie wouldn't have been set yet meaning that $HTTP_COOKIE_VARS[bbuserid] and bbpassword and bbstyleid and bblastvisit will have just been set but they aren't taken into account until a page is loaded after they have been sent.

In case you didn't know if you send a cookie it won't take effect until after the page is reloaded, hence all the transition pages in vBulletin.

[Jawelin]

No, sorry!
I was explained bad: logging the password, even what inserted by the user, would a great security hole, expecially after v2.2.x. Of course... !!

The two or three method (vars) I listed was only due to my needs to log the type of user' access:
simply I would know if the user comes (better, if the session is created when...) from a first login, with password inserted by hand, or from a cookied session.
I tried to check the user cookie preferences, but they are almost = 1 ....

So I was looking for another variable, that point of /admin/session.php, to check my question...
That's all...

Could you suggest any way ? I could even check the HTTP_COOKIE_VARS, but can I trust it that point of the script ?
How to check ?

More, what's the best way to backup and flush all these log tables periodically from a crone job ?
MySQL shell (bash) script or any php able to do the work ?

Thanks again. Hope it's clearer, now...
;-)

[Scott MacVicar]

probably a shell script

[Jawelin]

:stupid:

The next question is obvious...
I made it in MySQL area on vb.com but is still unsolved...
Do you have any idea about running several queries in the same mySql command-line statement ?
How can I dump only two or three tables, then flush them and reset the increment counter ?

Thanks again
Bye