From: Axel Roenn <axel@mpim-bonn.mpg.de>
Date: Mon, 9 Sep 2013 13:35:39 +0000 (+0200)
Subject: On an auth failure the uid and the IP address should be logged to the standard log... 
X-Git-Tag: v6.0.0alpha2~39^2~3
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=0cd6473909e3db54cb69df4de96ef8409b41e515;p=nextcloud-server.git

On an auth failure the uid and the IP address should be logged to the standard log file.
  This update works for a standard setup, when using a proxy for the server one can probably use the X-forwarded-for header
  instead of the remote address.
---

diff --git a/lib/base.php b/lib/base.php
index ea5adbadc9d..052444271c3 100644
--- a/lib/base.php
+++ b/lib/base.php
@@ -730,6 +730,8 @@ class OC {
 			// Someone wants to log in :
 		} elseif (OC::tryFormLogin()) {
 			$error[] = 'invalidpassword';
+			OC_Log::write('core', 'Login failed: user \''.$_POST["user"].'\' , wrong password, IP:'.$_SERVER['REMOTE_ADDR'],
+			OC_Log::ERROR);
 		}
 
 		OC_Util::displayLoginPage(array_unique($error));