Opened 3 years ago

Closed 2 years ago

#1486737 closed Feature Patches (fixed)

Add IP Address to Login Failures

Reported by: bradlis7 Owned by:
Priority: 5 Milestone: 0.6-beta
Component: Security Version: 0.3.1
Severity: normal Keywords: logging ipaddress
Cc:

Description

When a user fails at logging in, the IP address should be logged. This is important for the firewall that we use.

Attachments (1)

loginfailure.patch​ (969 bytes) - added by bradlis7 3 years ago.
A small change to add the IP address of failed user logins.

Download all attachments as: .zip

Change History (3)

Changed 3 years ago by bradlis7

A small change to add the IP address of failed user logins.

comment:1 Changed 3 years ago by alec

As in rcmail_log_login() we should probably also log HTTP_X_FORWARDED_FOR and HTTP_X_REAL_IP, but I'm not sure if this shall be included into rcube_imap_generic. You can write a plugin using 'login_failed' hook.

comment:2 Changed 2 years ago by alec

  • Milestone changed from later to 0.6-beta
  • Resolution set to fixed
  • Status changed from new to closed

It has been implemented some time ago.

Note: See TracTickets for help on using tickets.