From 4f97418b95620c45265955a16c546637c8c797d2 Mon Sep 17 00:00:00 2001 From: Cameron Date: Mon, 6 Jun 2016 13:06:28 -0700 Subject: [PATCH] More user-audit logs. --- e107_handlers/login.php | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/e107_handlers/login.php b/e107_handlers/login.php index a4afd2341..9d804288f 100644 --- a/e107_handlers/login.php +++ b/e107_handlers/login.php @@ -344,16 +344,20 @@ class userlogin } // Check username general format - if (!$forceLogin && (strlen($username) > $maxLength)) - { // Error - invalid username + if (!$forceLogin && (strlen($username) > $maxLength)) // Error - invalid username + { + $auditLog = array('reason'=>'username longer than maxlength', 'maxlength'=> $maxLength, 'username'=>$username); + e107::getAdminLog()->user_audit(USER_AUDIT_LOGIN, $auditLog, 0, $username); $this->invalidLogin($username,LOGIN_BAD_USERNAME); return FALSE; } $query = $this->getLookupQuery($username, $forceLogin); - if (e107::getDb()->select('user', '*', $query) !== 1) // Handle duplicate emails as well - { // Invalid user + if (e107::getDb()->select('user', '*', $query) !== 1) // Handle duplicate emails as well // Invalid user + { + $auditLog = array('reason'=>'query failed to return a result', 'query'=>$query, 'username'=>$username); + e107::getAdminLog()->user_audit(USER_AUDIT_LOGIN, $auditLog, 0, $username); return $this->invalidLogin($username,LOGIN_BAD_USER); }