From 549d9cf03b099c3808a8f03255f572e9397ef7cc Mon Sep 17 00:00:00 2001
From: Janos SUTO <sj@acts.hu>
Date: Thu, 7 Sep 2017 12:12:08 +0200
Subject: [PATCH] gui: log unsuccessful login attempts

Signed-off-by: Janos SUTO <sj@acts.hu>
---
 webui/controller/login/login.php | 2 ++
 webui/system/misc.php            | 6 +++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/webui/controller/login/login.php b/webui/controller/login/login.php
index b4142a45..04625da3 100644
--- a/webui/controller/login/login.php
+++ b/webui/controller/login/login.php
@@ -83,6 +83,8 @@ class ControllerLoginLogin extends Controller {
             }
          }
          else {
+            LOGGER('login failed', $this->request->post['username']);
+
             $this->model_user_auth->increment_failed_login_count($this->data['failed_login_count']);
             $this->data['failed_login_count']++;
          }
diff --git a/webui/system/misc.php b/webui/system/misc.php
index e294d81e..d7a89e96 100644
--- a/webui/system/misc.php
+++ b/webui/system/misc.php
@@ -1,8 +1,12 @@
 <?php
 
 function LOGGER($event = '', $username = '') {
+   $ipaddr = '';
+
    if($event == "") { return 0; }
 
+   if(isset($_SERVER['REMOTE_ADDR'])) { $ipaddr = $_SERVER['REMOTE_ADDR']; }
+
    $session = Registry::get('session');
 
    if($username == '') {
@@ -10,7 +14,7 @@ function LOGGER($event = '', $username = '') {
       else { $username = 'unknown'; }
    }
 
-   syslog(LOG_INFO, "username=$username, event='$event'");
+   syslog(LOG_INFO, "username=$username, event='$event', ipaddr=$ipaddr");
 }