Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failed logins are not logged #17

Open
aspark21 opened this issue Jun 29, 2020 · 0 comments
Open

Failed logins are not logged #17

aspark21 opened this issue Jun 29, 2020 · 0 comments

Comments

@aspark21
Copy link
Contributor

aspark21 commented Jun 29, 2020

Would expect failed logins to be recorded as \core\event\user_login_failed and/or in apache logs but these are nowhere to be found even on highest debug settings.

In particular with the $this->log calls would have expected the reason for the login failure to be exposed into the event

moodle-auth_basic/auth.php

Lines 126 to 135 in e81df7b

$this->log(__FUNCTION__ . " redirecting to $urltogo");
redirect($urltogo);
} else {
$this->log(__FUNCTION__ . " continuing onto " . qualified_me() );
}
} else {
$this->log(__FUNCTION__ . ' password bad');
}
} else {
$this->log(__FUNCTION__ . " invalid user: '{$_SERVER['PHP_AUTH_USER']}'");

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant