Failed Login Logging

This is a hack that was suggested by paulomt1, all it does is log failed logins and stores them in a table. An admin can then look at the failed logins in the admin panel, searching based on ip, username, password or date. They can also prune the old logs to save space.

You will be required to create a table this can be done via phpmyAdmin or the hack by Firefly which allows you to run queries via the admin panel. You then have to edit member.php to add the query to insert the failed login information and /admin/index.php to add the links to the loginlog.php file.

Updated 25th November 2001 @ 22:15

Added additions suggested by Mike to the file. Instructions on how to upgrade from the pervious version of this hack is included within install.txt, you will need to run 2 sql queries to adjust the table, adjust the line in member.php and upload loginlog.php again to complete the upgrade.

Scott

[Psychdrone]

I see, you know what I think I'll need this one!
THanks bud!

[wot-Mike]

Very usefull indeed, and I have installed it.

Changed a few things:
in admin/index.php, I added:
makenavoption("Login Failures","loginlog.php?action=modify");

And in loginlog.php I added:
echo "<li><a href=\"loginlog.php?s=$session[sessionhash]&action=prune\">Prune Failed Logins from database</a></li>\n";

The reason? Well, there's already a "Statistics & Logs" part in the admin panel. This fits in just nicely...

[wot-Mike]

Hmm, also imported some stuff from adminlog.php into loginlog.php:

The link to the user edit (well, it needed a little extra)
And the resolve ip address bit

[JTMON]

Installed on 2.2.0 and working great! Thanks PPN!

[SteveK]

wot-Mike, Can you post your changes?

Thanks

[Admin]

Love it, appears to work great.
Great idea too!

Just a question PPN, why do you name the id field just id?
If you create a table named blabla, naming the id field blablaid enables usages of some nice functions with vBulletin, that rely on the fact that id field is the table name with id suffix.

[Scott MacVicar]

that seemed too sensible

to tell the truth i done that in 30mins while having dinner and trying to talk on the phone and being pestered by people on AIM trying to get me to send them this hack because "The vBulletin is broken and I can't download anything"

I'll updated it tonight and add a small thing to alter the id name in case anyone using an old copy uploads a new one which will stop errors

[TheUnforgiven]

cool nice hack thanks!

[wot-Mike]

SteveK requested it, so here's my little changelog to add the user edit and resolve ip bit to loginlog.php. Hope it doesn't mess things up for you, hehe. I'm not very wise in the ways of php

But before you run off to install this, maybe wait a bit to see what PPN comes up with tonight

[holev]

very nice idea
installed