+- UserSpice (https://userspice.com/forums)
+-- Forum: General (https://userspice.com/forums/forumdisplay.php?fid=20)
+--- Forum: New to UserSpice? (https://userspice.com/forums/forumdisplay.php?fid=22)
+--- Thread: How Security Events are logged in UserSpice ? (/showthread.php?tid=821)
How Security Events are logged in UserSpice ? - Delsin474 - 11-06-2017
I want to modify the code to generate specific Security Event.
How Security Events are logged in UserSpice ? - Brandin - 11-06-2017
Generally security events are logged on tomfoolery.php and the information is gathered from the audit table.
How Security Events are logged in UserSpice ? - mudmin - 11-06-2017
But in 4.3 we have a more detailed logging system where you can log your events in your code however you want. We also have a little more advanced tomfoolery that looks to see if the ip which triggered a security event has logged in before and if it has it assigns it as being most likely from that user.
How Security Events are logged in UserSpice ? - Delsin474 - 11-13-2017
I am unable to find the code where information is inserted in audit table.
In tomfoolery.php I think only the information from audit table is extracted and displayed in the form of Security Events.
How Security Events are logged in UserSpice ? - mudmin - 11-13-2017
Yep. It's in the securePage function in us_helpers.php just search for the word audit.
The logic is a little fancier in 4.3 to infer who could have triggerd the security issue even if they're not logged in.
You can add your own events too.
4.3 also has a logging feature that lets you do more expanded logging...so you can do things like "user 3 changed their password" in the logs.
How Security Events are logged in UserSpice ? - Delsin474 - 11-14-2017
Thanks for the instant reply. In love with Userspice.
How Security Events are logged in UserSpice ? - mudmin - 11-15-2017
We love having you, please don't hesitate to ask more questions as they come up.