diff --git a/check_login.php b/check_login.php index 351c1e18..78718ab0 100644 --- a/check_login.php +++ b/check_login.php @@ -9,7 +9,7 @@ } if(!$_SESSION['logged']){ - header("Location: logout.php"); + header("Location: login.php"); die; } diff --git a/functions.php b/functions.php index c15de0e8..10c2f39a 100644 --- a/functions.php +++ b/functions.php @@ -282,4 +282,10 @@ function formatPhoneNumber($phoneNumber) { return $phoneNumber; } +//SESSION FINGERPRINT +$session_ip = get_ip(); +$session_os = get_os(); +$session_browser = get_web_browser(); +$session_device = get_device(); + ?> \ No newline at end of file diff --git a/login.php b/login.php index 6974021b..03546adb 100644 --- a/login.php +++ b/login.php @@ -43,7 +43,7 @@ if(isset($_POST['login'])){ if(empty($token)){ $_SESSION['logged'] = TRUE; - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = 'Success', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = 'Success', log_description = '$user_name successfully logged in', log_ip = '$ip', log_user_agent = '$os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); header("Location: dashboard.php"); }else{ @@ -60,12 +60,11 @@ if(isset($_POST['login'])){ if(TokenAuth6238::verify($token,$current_code)){ $_SESSION['logged'] = TRUE; - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login 2FA', log_action = 'Success', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login 2FA', log_action = 'Success', log_description = '$user_name successfully logged in using 2FA', log_ip = '$ip', log_user_agent = '$os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); //header("Location: $config_start_page"); - echo ""; header("Location: dashboard.php"); }else{ - mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = '2FA Failed', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); + mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = '2FA Failed', log_description = '$user_name failed 2FA', log_ip = '$ip', log_user_agent = '$os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id"); $response = "