changeset 717:6178399820b9

Add some "security" logging.
author Matti Hamalainen <ccr@tnsp.org>
date Wed, 12 Nov 2014 16:40:52 +0200
parents e7fbcf4190e6
children 6789038b5ce0
files admlogin.php
diffstat 1 files changed, 5 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/admlogin.php	Wed Nov 12 16:31:35 2014 +0200
+++ b/admlogin.php	Wed Nov 12 16:40:52 2014 +0200
@@ -18,15 +18,18 @@
 //
 // Authenticate
 //
+$sfrom = $_SERVER["REMOTE_ADDR"];
 $password = stGetSetting("admPassword");
 if (stGetRequestItem("admpass", FALSE) == $password)
 {
   if (!stSessionStart(SESS_ADMIN, $password, "admTimeout"))
-    error_log("Admin session AUTH LOGIN failed (session setup)");
+    error_log("Admin session AUTH LOGIN failed (session setup) @ ".$sfrom);
+  else
+    error_log("Admin session LOGIN SUCCESS @ ".$sfrom);
 }
 else
 {
-  error_log("Admin session AUTH LOGIN failed (password)");
+  error_log("Admin session AUTH LOGIN failed (password) @ ".$sfrom);
 }
 
 header("Location: admin.php");