Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-48438

Add real name to Email about login failures

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide

      Enable the notifyloginfailures setting and set notifyloginfailures to 1.
      Attempt to login using valid usernames and invalid passwords as well as invalid usernames.
      Run cron job.
      Where known the fullname of the user trying to login will be shown.

      Show
      Enable the notifyloginfailures setting and set notifyloginfailures to 1. Attempt to login using valid usernames and invalid passwords as well as invalid usernames. Run cron job. Where known the fullname of the user trying to login will be shown.
    • Affected Branches:
      MOODLE_27_STABLE
    • Fixed Branches:
      MOODLE_30_STABLE
    • Pull Master Branch:

      Description

      When $CFG->notifyloginfailures is set, the selected users get mails as soon as a user tries to login and does not succeed.

      The mail gives information about time & date, IP and username of the failed login.

      I would like to propose to add an additional column to the mail text which tells the real name of the user whose username was used to login. This way, admins could better assess if
      a) the failed login belongs to a real user account in Moodle and was not caused by a typo in the username
      b) the affected user account belongs to an important Moodle user (school director, member of teacher staff) and might be under attack

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Fix Release Date:
                16/Nov/15