add message in web server log in case of authentication failure to enable the usage of fail2ban on failed login attempts

1 files changed, 2 insertions, 0 deletions

diff --git a/inc/poche/Poche.class.php b/inc/poche/Poche.class.php
index a29cb327..75766919 100755
--- a/inc/poche/Poche.class.php
+++ b/inc/poche/Poche.class.php
@@ -543,6 +543,8 @@ class Poche
                 Tools::redirect($referer);
             }
             $this->messages->add('e', _('login failed: bad login or password'));
+            // log login failure in web server log to allow fail2ban usage
+            error_log('user '.$login.' authentication failure');
             Tools::logm('login failed');
             Tools::redirect();
         }