Failed logins

[Coyote]

Maybe its just me, but I would like to be able to have a report of failed logins.

I think it should be in the admin panel.

[Chris Cromer]

I think failed logins are bad. For insance if you get the correct username but an incorrect password(maybe just one letter off) the admin might be able to figure out your password if they have error loggin enabled. I think that the password should be crypted before putting it into the error message so that the admin can't see what the password they tried was.

[Coyote]

Oh yeah, you are correct - but 'the unpredictable one' announced that it dosen't matter that the text is in the clear - because its noas if its a bacnk pin number. So I guess that wont be changed.

What I would like to see though is a report of suspicious activity - like failed logins - but different password attempts - stuff like that.

I dont think it matters that the Admin could see the passwords - after all the Admin is running the site, and if he wanted to he could get the password anyway.

[David]

Seach the board and you will find how to remove the passwords from both the screen and the error logs.