Merge pull request #690 from doc75/log_auth_error

Add message in web server log in case of authentication failure

1 files changed, 2 insertions, 0 deletions

diff --git a/inc/poche/Poche.class.php b/inc/poche/Poche.class.php
index 6a742019..8b0d3a19 100755
--- a/inc/poche/Poche.class.php
+++ b/inc/poche/Poche.class.php
@@ -576,6 +576,8 @@ class Poche
                 Tools::redirect($referer);
             }
             $this->messages->add('e', _('login failed: bad login or password'));
+            // log login failure in web server log to allow fail2ban usage
+            error_log('user '.$login.' authentication failure');
             Tools::logm('login failed');
             Tools::redirect();
         }