search

OWASP / phpsec

OWASP PHP Security Project - THIS PROJECT IS INACTIVE AND MAY CONTAIN SECURITY FLAWS
197 stars 103 forks source link

Last login #72

Closed rash805115 closed 10 years ago

rash805115 commented 10 years ago

Right now, there is no such thing as last login time. So for this reason, we cannot tell that when was the last time that the user logged in.

To do this I need to do a small change...Will do.

mebjas commented 10 years ago

And what about the last login location section?

Sent from my Galaxy Note 8.0

rash805115 commented 10 years ago

in the PASSWORD table?? If yes, then that is for brute force checks..only filled when wrong password is entered...

mebjas commented 10 years ago

Couldn't get you :O I was saying I believe the last login location section has not been implemented, so are there any plans of implementing those?

On Sun, Oct 20, 2013 at 11:27 AM, Rahul Chaudhary notifications@github.comwrote:

int he PASSWORD table?? If yes, then that is for brute force checks..only filled when wrong password is entered...

— Reply to this email directly or view it on GitHubhttps://github.com/OWASP/phpsec/issues/72#issuecomment-26665707 .

rash805115 commented 10 years ago

Oh....I was referring to another thing entirely...you are thinking of "location". Location is still not implemented. Maybe in near future.

I was talking about "Last Login Time". Right now, we do not store the time when the user logged in. So at a later time, we cannot show them when was the last time he logged in, or what amount of time has passed since he last logged in. For this we need to make space in our DB...

mebjas commented 10 years ago

@rash805115 Have a look at https://github.com/OWASP/phpsec/pull/87 , I have implemented this feature, Thanks