Log failed login attempts (unknown user / invalid credentials / LDAP unreachable) to /db/log/fid.log

www/login.php

@@ -5,6 +5,9 @@
 		if (!preg_match("/^\s*$/",$_POST['password']) &&
 	  	  !preg_match("/^\s*$/",$_POST['name'])) {
 
+			// sanitized for logging only - never used for auth/DB lookups
+			$loginname = preg_replace('/[\r\n|]/', '_', $_POST['name']);
+
 			// Local instance: auth against LDAP (simple bind, read-only) instead of NIS (ypcat).
 			$res = mydo("SELECT * FROM user WHERE name='" . mysql_escape_string($_POST['name']) . "'");
 			$row = mysql_fetch_assoc($res);
@@ -21,9 +24,16 @@
 						$_SESSION['NameFID']=$_POST['name'];
 						$_SESSION['RoleFID']=$row['role'];
 						$_SESSION['GrpFID']=$row['grp'];
+						phplog("login ok: $loginname");
+					} else {
+						phplog("login failed (invalid credentials): $loginname");
 					}
 					ldap_unbind($ldap);
+				} else {
+					phplog("login failed (LDAP server unreachable): $loginname");
 				}
+			} else {
+				phplog("login failed (unknown user): $loginname");
 			}
 		}
 	}