github-mirror/BookStack
2
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2024-11-25 09:42:10 +08:00
Code Issues Actions 24 Packages Projects Releases Wiki Activity

Log failed accesses option

Browse Source
This commit is contained in:
benrubson 2020-05-03 16:20:02 +02:00
parent 12a9a45747
commit 58df3ad956
2 changed files with 20 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.env.example.complete
View File

@ -267,3 +267,9 @@ API_MAX_ITEM_COUNT=500
# The number of API requests that can be made per minute by a single user.
API_REQUESTS_PER_MIN=180
# Failed access
# message to log into webserver logs in case of failed access, for further processing by tools like Fail2Ban
# Apache users should use : user "%u" authentication failure for "BookStack"
# Nginx users should use : user "%u" was not found in "BookStack"
FAILED_ACCESS_MESSAGE=''

19
app/Http/Controllers/Auth/LoginController.php
View File

@ -169,15 +169,20 @@ class LoginController extends Controller
}
/**
* Log failed accesses, matching the default fail2ban nginx/apache auth rules.
* Log failed accesses, for further processing by tools like Fail2Ban
*
* @param \Illuminate\Http\Request $request
* @return void
*/
protected function logFailedAccess(Request $request)
protected function logFailedAccess($request)
{
if (isset($_SERVER['SERVER_SOFTWARE']) && preg_match('/nginx/i', $_SERVER['SERVER_SOFTWARE'])) {
error_log('user "' . $request->get($this->username()) . '" was not found in "BookStack"', 4);
} else {
error_log('user "' . $request->get($this->username()) . '" authentication failure for "BookStack"', 4);
}
$log_msg = env('FAILED_ACCESS_MESSAGE', '');
if (!is_string($request->get($this->username())) || !is_string($log_msg) || strlen($log_msg)<1)
return;
$log_msg = str_replace("%u", $request->get($this->username()), $log_msg);
error_log($log_msg, 4);
}
}