class.t3lib_userauthgroup.php File Reference

Go to the source code of this file.

Namespaces
namespace	TYPO3
Classes
class	t3lib_userAuthGroup
Functions
	writelog ($type, $action, $error, $details_nr, $details, $data, $tablename='', $recuid='', $recpid='', $event_pid=-1, $NEWid='')
	Writes an entry in the logfile ...
	checkLogFailures ($email, $secondsBack=3600, $max=3)
	Sends a warning to $email if there has been a certain amount of failed logins during a period.

---

Function Documentation

checkLogFailures (  $  email, $  secondsBack = 3600, $  max = 3 )

Sends a warning to $email if there has been a certain amount of failed logins during a period. If a login fails, this function is called. It will look up the sys_log to see if there has been more than $max failed logins the last $secondsBack seconds (default 3600). If so, an email with a warning is sent to $email. Parameters: string  Email address integer  Number of sections back in time to check. This is a kind of limit for how many failures an hour for instance. integer  Max allowed failures before a warning mail is sent Returns: void private Definition at line 1029 of file class.t3lib_userauthgroup.php. References error(). { if ($email) { // get last flag set in the log for sending $theTimeBack = time()-$secondsBack; $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery( 'tstamp', 'sys_log', 'type=255 AND action=4 AND tstamp>'.intval($theTimeBack), '', 'tstamp DESC', '1' ); if ($testRow = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($res)) { $theTimeBack = $testRow['tstamp']; } // Check for more than $max number of error failures with the last period. $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery( '*', 'sys_log', 'type=255 AND action=3 AND error!=0 AND tstamp>'.intval($theTimeBack), '', 'tstamp' ); if ($GLOBALS['TYPO3_DB']->sql_num_rows($res) > $max) { // OK, so there were more than the max allowed number of login failures - so we will send an email then. $subject = 'TYPO3 Login Failure Warning (at '.$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'].')'; $email_body = ' There has been numerous attempts ('.$GLOBALS['TYPO3_DB']->sql_num_rows($res).') to login at the TYPO3 site "'.$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'].'" ('.t3lib_div::getIndpEnv('HTTP_HOST').'). This is a dump of the failures: '; while($testRows = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($res)) { $theData = unserialize($testRows['log_data']); $email_body.=date($GLOBALS['TYPO3_CONF_VARS']['SYS']['ddmmyy'].' H:i',$testRows['tstamp']).': '.@sprintf($testRows['details'],''.$theData[0],''.$theData[1],''.$theData[2]); $email_body.=chr(10); } mail( $email, $subject, $email_body, 'From: TYPO3 Login WARNING<>' ); $this->writelog(255,4,0,3,'Failure warning (%s failures within %s seconds) sent by email to %s',Array($GLOBALS['TYPO3_DB']->sql_num_rows($res),$secondsBack,$email)); // Logout written to log } } }

writelog (  $  type, $  action, $  error, $  details_nr, $  details, $  data, $  tablename = '', $  recuid = '', $  recpid = '', $  event_pid = -1, $  NEWid = '' )

Writes an entry in the logfile ... Still missing documentation for syntax etc... Parameters: integer  $type: denotes which module that has submitted the entry. This is the current list: 1=tce_db; 2=tce_file; 3=system (eg. sys_history save); 4=modules; 254=Personal settings changed; 255=login / out action: 1=login, 2=logout, 3=failed login (+ errorcode 3), 4=failure_warning_email sent integer  action denotes which specific operation that wrote the entry (eg. 'delete', 'upload', 'update' and so on...). Specific for each type. Also used to trigger update of the interface. (see the log-module for the meaning of each number !!) integer  $error: flag. 0 = message, 1 = error (user problem), 2 = System Error (which should not happen), 3 = security notice (admin) integer  details_nr The message number. Specific for each type and $action. in the future this will make it possible to translate errormessages to other languages string  $details: Default text that follows the message array  $data: Data that follows the log. Might be used to carry special information. If an array the first 5 entries (0-4) will be sprintf'ed the details-text... string  tablename Special field used by tce_main.php. These ( tablename, $recuid, $recpid) holds the reference to the record which the log-entry is about. (Was used in attic status.php to update the interface.) integer  recuid Special field used by tce_main.php. These ( tablename, $recuid, $recpid) holds the reference to the record which the log-entry is about. (Was used in attic status.php to update the interface.) integer  recpid Special field used by tce_main.php. These ( tablename, $recuid, $recpid) holds the reference to the record which the log-entry is about. (Was used in attic status.php to update the interface.) integer  $event_pid: The page_uid (pid) where the event occurred. Used to select log-content for specific pages. string  $NEWid: NEWid string Returns: void Definition at line 996 of file class.t3lib_userauthgroup.php. References error(). Referenced by t3lib_extFileFunctions::func_copy(), t3lib_extFileFunctions::func_delete(), t3lib_extFileFunctions::func_edit(), t3lib_extFileFunctions::func_move(), t3lib_extFileFunctions::func_newfile(), t3lib_extFileFunctions::func_newfolder(), t3lib_extFileFunctions::func_rename(), t3lib_extFileFunctions::func_unzip(), and t3lib_extFileFunctions::func_upload(). { $fields_values = Array ( 'userid' => intval($this->user['uid']), 'type' => intval($type), 'action' => intval($action), 'error' => intval($error), 'details_nr' => intval($details_nr), 'details' => $details, 'log_data' => serialize($data), 'tablename' => $tablename, 'recuid' => intval($recuid), 'recpid' => intval($recpid), 'IP' => t3lib_div::getIndpEnv('REMOTE_ADDR'), 'tstamp' => $GLOBALS['EXEC_TIME'], 'event_pid' => intval($event_pid), 'NEWid' => $NEWid ); $GLOBALS['TYPO3_DB']->exec_INSERTquery('sys_log', $fields_values); return $GLOBALS['TYPO3_DB']->sql_insert_id(); }

---