Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
Pages: 1
Failed login attempts
Is it possible to get informed on failed login attempts or to log them? Best solution would be to log them in “/var/log/auth.log” or in another file and to use it in fail2ban to block the corresponding IP`s.
Offline
Re: Failed login attempts
From Textpattern with a plugin? The login screen and authetication functions are not “plugable” (ie. no plugins are loaded there). If you want to do it from Textpattern itself you would have to modify the core or exploit themes loading. Tho, you could possible monitor the post values and compare them to the database values or you could limit requests with modsecurity etc. TXP itself doesn’t return anything to monitor on login fail.
If you want to modify TXP’s core then the modification would go to around line 211 in /textpattern/include/txp_auth.php file. There you could possibly add some simple code that writes the IP in the banlist file.
Offline
Re: Failed login attempts
ah, ok :-)
Offline
Pages: 1