diff --git a/check_login.php b/check_login.php index 351c1e18..78718ab0 100644 --- a/check_login.php +++ b/check_login.php @@ -9,7 +9,7 @@ } if(!$_SESSION['logged']){ - header("Location: logout.php"); + header("Location: login.php"); die; } diff --git a/functions.php b/functions.php index c15de0e8..10c2f39a 100644 --- a/functions.php +++ b/functions.php @@ -282,4 +282,10 @@ function formatPhoneNumber($phoneNumber) { return $phoneNumber; } +//SESSION FINGERPRINT +$session_ip = get_ip(); +$session_os = get_os(); +$session_browser = get_web_browser(); +$session_device = get_device(); + ?> \ No newline at end of file diff --git a/login.php b/login.php index 6974021b..03546adb 100644 --- a/login.php +++ b/login.php @@ -43,7 +43,7 @@ if(isset($_POST['login'])){ if(empty($token)){ $_SESSION['logged'] = TRUE; - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = 'Success', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = 'Success', log_description = '$user_name successfully logged in', log_ip = '$ip', log_user_agent = '$os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); header("Location: dashboard.php"); }else{ @@ -60,12 +60,11 @@ if(isset($_POST['login'])){ if(TokenAuth6238::verify($token,$current_code)){ $_SESSION['logged'] = TRUE; - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login 2FA', log_action = 'Success', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login 2FA', log_action = 'Success', log_description = '$user_name successfully logged in using 2FA', log_ip = '$ip', log_user_agent = '$os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); //header("Location: $config_start_page"); - echo ""; header("Location: dashboard.php"); }else{ - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = '2FA Failed', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = '2FA Failed', log_description = '$user_name failed 2FA', log_ip = '$ip', log_user_agent = '$os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); $response = "
@@ -77,7 +76,7 @@ if(isset($_POST['login'])){ } }else{ - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = 'Failed', log_description = '$username - $ip - $os - $browser - $device', log_created_at = NOW()"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = 'Failed', log_description = '$user_name failed to log in', log_ip = '$ip', log_user_agent = '$os - $browser - $device', log_created_at = NOW()"); $response = "
diff --git a/logout.php b/logout.php deleted file mode 100644 index 1c7ddbab..00000000 --- a/logout.php +++ /dev/null @@ -1,7 +0,0 @@ - \ No newline at end of file diff --git a/logs.php b/logs.php index 5e566f67..40b6170a 100644 --- a/logs.php +++ b/logs.php @@ -74,7 +74,7 @@ $url_query_strings_sb = http_build_query(array_merge($_GET,array('sb' => $sb, 'o $sql = mysqli_query($mysqli,"SELECT SQL_CALC_FOUND_ROWS * FROM logs LEFT JOIN users ON log_user_id = user_id - WHERE (log_type LIKE '%$q%' OR log_action LIKE '%$q%' OR log_description LIKE '%$q%' OR user_name LIKE '%$q%') + WHERE (log_type LIKE '%$q%' OR log_action LIKE '%$q%' OR log_description LIKE '%$q%' OR log_ip LIKE '%$q%' OR log_user_agent LIKE '%$q%' OR user_name LIKE '%$q%') AND DATE(log_created_at) BETWEEN '$dtf' AND '$dtt' ORDER BY $sb $o LIMIT $record_from, $record_to" ); @@ -85,14 +85,14 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
-

Logs

+

Audit Logs

- +
@@ -143,6 +143,8 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); Type Action Description + IP Address + User Agent @@ -153,6 +155,8 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); $log_type = $row['log_type']; $log_action = $row['log_action']; $log_description = $row['log_description']; + $log_ip = $row['log_ip']; + $log_user_agent = $row['log_user_agent']; $log_created_at = $row['log_created_at']; $user_id = $row['user_id']; $user_name = $row['user_name']; @@ -170,6 +174,8 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); + + + + \ No newline at end of file diff --git a/side_nav.php b/side_nav.php index e11f48c2..d0b68398 100644 --- a/side_nav.php +++ b/side_nav.php @@ -260,7 +260,7 @@ diff --git a/top_nav.php b/top_nav.php index 957a21ff..00542796 100644 --- a/top_nav.php +++ b/top_nav.php @@ -58,7 +58,7 @@