[PHP] Loging bad logins/passwords.

[paulenas]

Here is part of php code:

<table class=\"border\" width=\"750\" border=\"0\" align=\"center\" style=\"border-collapse: collapse\" cellpadding=\"5\">
<tr>
<td class=\"window1\">UAB Spartukas - Puslapio tekstu valdymas » <b>Prisijungti</b></td>
</tr>
<tr>
<td class=\"window2\">
<form action=\"index.php\" method=\"post\" style=\"margin: 0px\">
<table border=\"0\" width=\"98%\" style=\"border-collapse: collapse\">
<tr><td width=100>Administratorius:</td><td><input type=\"text\" name=\"id\" size=\"20\"></td></tr>
<tr><td width=100>Slaptazhodis:</td><td><input type=\"password\" name=\"pass\" size=\"20\"></td></tr>
<tr><td width=100>Duration:</td><td><input style=\"width: 30px\" type=\"text\" value=\"60\" name=\"time\" size=\"20\"> Minutes</td></tr>
<tr><td width=100></td><td><input type=\"submit\" name=\"login\" value=\"Login\" size=\"20\"></td></tr>
</table>
</form>
</td>
</tr>
</table>
";
if(isset($_POST['login'])){
$id = $_POST['id'];
$pass = $_POST['pass'];
$time = $_POST['time'];
include("data\account.php");
if($id == $username && $pass == $userpass){
setcookie("quickedit_user", $username, time()+60*$time,"/");
setcookie("quickedit_pass", md5($password), time()+60*$time,"/");
header("Location: data\lgsucced-psk-accsgrnt-tmo_s_admin-7777-main-accs.php");
**
else{
echo "<br><table class=\"border\"style=\"overflow: auto\" align=\"center\">
<tr>
<td style=\"padding-left: 200px; padding-right: 200px;\" class=\"nera\">
<b>Wrong login or password !!!</b>
</td>
</tr>
</table>

Is here any way to log wrong logins/passwords with IP to txt file?

 

[[lexx]]

[lt] ka cia meistravoji?

 

[paulenas]

[lt] Ai, darau puslapi savo kriskto motinai, ir noriu padaryt kad ji pati galetu ji atnaujinti per admin control panel

 

[[lexx]]

[lt] tai koki CMS'a naudoji ar pats PHP programini?

 

[paulenas]

[lt] tai koki CMS'a naudoji ar pats PHP programini?

[lt]m, radau viena control panel atsisiust, dabar ji editinu.

 

[[lexx]]

[lt] tai tu paprasciausiai .htaccess faila uzdek, ir niekas, nezinantis pwd, negales prie tos control panel prieiti

 

[paulenas]

[lt] kaip? m?

 

[[lexx]]

[lt] nu as supratau, kad tu nori ideti apsauga, kad niekas prie to administravimo neprieitu, ane? kokioje operacineje sistemoje bus laikoma ta svetaine?

 

[paulenas]

[lt] ash noriu kad tik ash ir tik kriskto mochia, pasileidus host/admin galetu naudotis ta control panel. O kokioj OS bus laikoma tai bbz, takas.lt servai.

 

[[lexx]]

[lt] nu jei pats prie sisteminiu failu neturesi priejimo tai nzn kaip ten bus, bet galima padaryti .htaccess faila su IP ir su password apsauga.
paciam reikia skripta pasirasyti vienam darbeliui, tai va ka susiradau:
http://sniptools.com/vault/windows-apache-and-htaccess-authentication.htm
kazkada buvau dares su linux'u, bet labai seniai, tai pamirsau ka te daryt reik, tai va psl susiradau. tai ten paaiskinta. dar pats neturejau laiko pasiskaitineti.

 

[paulenas]

[lt]Gal pagal shita galima pasakyt?

 

[Clone]

[It] blah blah blah skdks ... WHAT? huh?

 

[Hybr!d]

Here is a short PHP code i put together...

<?php
{if($id != $username && $pass != $userpass){
$ip=getenv("REMOTE_ADDR");
$host = gethostbyaddr($ip);
$date=date("F j, Y G:i:s");
echo"$top Invalid Login $bottom - Attempt Logged ($host($ip) on $date)";
$filename="iplogger.txt";$file = fopen($filename, "a");
fwrite($file, "$host($ip) tried to use Password : $watever on $date<br>");
fclose($file);
exit;
?>

Now all you got to do is customize this and modify abit to suit you...
Hope it helps you!!

 

[john_d]

fwrite($file, "$host($ip) tried to use Password : $watever on $date<br>");

dont put <br>... ur not making a html file..

instead put \r (for hard return) or \n (for new line) or even \t (for tab..)

this will make ur log files mor consistent.. and will be easier to prase if u want to parse and edit it

 

[paulenas]

Thanks guys! I got it working.

I will ask help for u latter if i'll need.