#1061 login attempt e-mail notification

wont-fix
nobody
5
2013-06-11
2007-09-25
No

Hello,

Would like to put in a request for a feature that sends e-mail notification when there is a login attempt or when someone successfully logs in.

Otherwise it's pretty hard to detect if someone has found the phpmyadmin installation and is trying to brute force the logins. IP based directory protection is also not an option for users with a dynamic IP address.

Thanks

Discussion

  • Isaac Bennetch

    Isaac Bennetch - 2007-10-03

    Logged In: YES
    user_id=835650
    Originator: NO

    What about looking at your Apache error logs or using one of the many security-minded tools which do the same? To me, it seems one of those would be a much better option than adding this to phpMyAdmin and would be building off an existing utility designed for that, rather than trying to add that to phpMyAdmin.

    You could write your own 'signon' script, use auth_type='signon' and do the logging there.

     
  • Ruben Barkow

    Ruben Barkow - 2008-04-25

    Logged In: YES
    user_id=334647
    Originator: NO

    maybe this is a solution:

    prevent brute force attempts in phpmyadmin
    someone has found a solution:
    http://p-board.net/thread.php?threadid=54

    did someone try that one?
    it is in german, but i think many of the pma developers are german

     
  • Michal Čihař

    Michal Čihař - 2009-03-03
    • status: open --> pending-wont-fix
     
  • Michal Čihař

    Michal Čihař - 2009-03-03

    I don't think sending an email when login fails is a good idea. Basically it's best way to DOS your mail system.

    Analyzing web server logs seems to be better approach to detect this. phpMyAdmin in current trunk (upcoming 3.2.0) allows you to log all required information with Apache web server.

     
  • SourceForge Robot

    • status: pending-wont-fix --> closed-wont-fix
     
  • SourceForge Robot

    This Tracker item was closed automatically by the system. It was
    previously set to a Pending status, and the original submitter
    did not respond within 14 days (the time period specified by
    the administrator of this Tracker).

     
  • Michal Čihař

    Michal Čihař - 2013-06-11
    • Status: closed-wont-fix --> wont-fix
     

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks