Skip to content

Failed logins are not logged #17

Description

@aspark21

Would expect failed logins to be recorded as \core\event\user_login_failed and/or in apache logs but these are nowhere to be found even on highest debug settings.

In particular with the $this->log calls would have expected the reason for the login failure to be exposed into the event

moodle-auth_basic/auth.php

Lines 126 to 135 in e81df7b

$this->log(__FUNCTION__ . " redirecting to $urltogo");
redirect($urltogo);
} else {
$this->log(__FUNCTION__ . " continuing onto " . qualified_me() );
}
} else {
$this->log(__FUNCTION__ . ' password bad');
}
} else {
$this->log(__FUNCTION__ . " invalid user: '{$_SERVER['PHP_AUTH_USER']}'");

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions