• OzzModz is no longer taking registrations. All registrations are being redirected to Snog's Site
    All addons and support is available there now.

Possible to update this addon to use the userchangelog table?

brettc frontier

New member
Greetings, I've stumbled across your addon but noticed this setup is based per flat file. Which is a slight security problem no matter how secure that i may make the log file/directories that it resides in.

Would it be possible if this addon could be updated to utilize the userchangelog table? In doing so, making the option available to log all failure and/or success logins would be nice. Granted, for larger forums - that table can become rather large over time. :)

Within userchangelog... we have the ID number of the changeid (incremental), userid, fieldname, newvalue, oldvalue, adminid, change_time, change_uniq and ipaddress.

Most of those fields can be utilized for basic logging...


  • userid would be the user that logged in/out.
  • fieldname would have two login types/names: loginsuccess, loginfailure.
  • newvalue, oldvalue, adminid all could be ignored.
  • change_time is the standard UNIX time stamp.
  • change_uniq, I still don't have a clue how this hash is calculated.
  • ipaddress would be the logged IP of the login success or failure.

This then could potentially be converted over to allowing users to view login logs in their userCP such as ./profile.php?do=viewloginhistory

Thanks,
Brett
 
It is possible, but I did not want to add to the DB with this mod. Why do you feel there is a security risk the way it is?
 
Back
Top