Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-48438

Add real name to Email about login failures

    XMLWordPrintable

Details

    • MOODLE_27_STABLE
    • MOODLE_30_STABLE
    • Hide

      Enable the notifyloginfailures setting and set notifyloginfailures to 1.
      Attempt to login using valid usernames and invalid passwords as well as invalid usernames.
      Run cron job.
      Where known the fullname of the user trying to login will be shown.

      Show
      Enable the notifyloginfailures setting and set notifyloginfailures to 1. Attempt to login using valid usernames and invalid passwords as well as invalid usernames. Run cron job. Where known the fullname of the user trying to login will be shown.

    Description

      When $CFG->notifyloginfailures is set, the selected users get mails as soon as a user tries to login and does not succeed.

      The mail gives information about time & date, IP and username of the failed login.

      I would like to propose to add an additional column to the mail text which tells the real name of the user whose username was used to login. This way, admins could better assess if
      a) the failed login belongs to a real user account in Moodle and was not caused by a typo in the username
      b) the affected user account belongs to an important Moodle user (school director, member of teacher staff) and might be under attack

      Attachments

        Activity

          People

            andrew_dc_hancox Andrew Hancox
            abias Alexander Bias
            Adrian Greeve Adrian Greeve
            Eloy Lafuente (stronk7) Eloy Lafuente (stronk7)
            cameron1729 cameron1729
            Andrew Lyons, Huong Nguyen, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              16/Nov/15