trying to log all bad logins

[pattycake]

I have a lot of people telling me that their logins are not working, and it's usually a user error.

But, to be sure, I would like to log all bad login requests

In login.php

if (!verify_authentication($vbulletin->GPC['vb_login_username'], $vbulletin->GPC['vb_login_password'], $vbulletin->GPC['vb_login_md5password'], $vbulletin->GPC['vb_login_md5password_utf'], $vbulletin->GPC['cookieuser'], true))
	{

Inside the above loop, I tried setting these variables so I could later write them out to a log file.

$tried_username=$vbulletin->GPC['vb_login_username'];
$tried_password=$vbulletin->GPC['vb_login_password'];

$tried_username works.. it's capturing what they entered but, $tried_password is always blank.

What I am doing wrong?

[vBNinja]

Try adding this to your config.php file

define('DISABLE_PASSWORD_CLEARING', 1);

[pattycake]

Originally Posted by vBNinja

Try adding this to your config.php file

define('DISABLE_PASSWORD_CLEARING', 1);

Bingo... that worked! I had already started recoding the login form to add a hidden field called clear_password", with an onblur to pupulate that field. Your method save me a lot of frustration getting it to work. Thank you... THANK YOU!