HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.
Proud to be a PHP Open Source CMS
Learn more

> Home » Forum home » Deploying » View topic

No user on the "Admin Zone front-page accessed" notification

Login / Search

 [ Join | More ]
 [More]
 Add topic 
Posted
Rating:
#85728 (In Topic #17593)
BobS
Avatar

Community saint
I received a notification that someone accessed the adminzone front page but it does not include a user, just the site name:
Someone who is logged-in as {JulianRitterCentral - A community site sharing the life and art of Julian Ritter} has accessed the Admin Zone front page. That's probably a normal thing for them - this notification is a security feature to help you spot potential hackers, if you think this looks wrong.

Based on the time, I suspect that this was me.

Bob
Back to the top
 
Posted
Rating:
#85745
sholzy
Avatar

Community saint
LOL! Yep, I discovered that too during the RC cycles and was going to bring it to Chris' attention but found other things more important. Since I'm the only one with access to the Admin panel I turned it back off.
Steve
Back to the top
 
Posted
Rating:
#85750
BobS
Avatar

Community saint
Just got another email when I logged in again.

I am just wondering if there is something more informative in the message if someone other than me accesses the adminzone. Surely, it should have the username and IP address in the message.

Bob
Back to the top
 
Posted
Rating:
#85754
sholzy
Avatar

Community saint
Do you have a test user account? Give it admin rights and log in with it.
Steve
Back to the top
 
Posted
Rating:
#85755
BobS
Avatar

Community saint
Tried that and got the same notification with the SITE_INFO instead of Uer. The message should contain the User and the IP address.

Bob
Back to the top
 
Posted
Rating:
#85757
sholzy
Avatar

Community saint
I see Chris is lurking this thread so it's as good as fixed!  :lol:
Steve
Back to the top
 
Posted
Item has a rating of 5 (Liked by sholzyLiked by BobS)  
Rating:
#85758
Chris Graham
Avatar

ocStaff (admin)
I'll take a look within a few days, knee deep in template changes in the unstable branch at the moment.


Become a fan of ocPortal on Facebook or add me as a friend.

Expand: Was I helpful? Was I helpful?

Expand: Follow me on Twitter Follow me on Twitter







If I answered something that you think should be in the documentation, please take the initiative and add it to the community documentation. We really need people to help out here and build a well-organised large support resource.
Back to the top
 
Posted
Rating:
#86015
Chris Graham
Avatar

ocStaff (admin)
I think this will fix it. I didn't quite got what you got, but I did find some other issues. I think I probably just saw a different spin on the same problem.

Attachment
sources/site.php
» Download: site.php (68 Kb, 43 downloads so far)
Attachment
lang/EN/global.ini
» Download: global.ini (46 Kb, 43 downloads so far)
Attachment
sources/mail.php
» Download: mail.php (32 Kb, 42 downloads so far)


Become a fan of ocPortal on Facebook or add me as a friend.

Expand: Was I helpful? Was I helpful?

Expand: Follow me on Twitter Follow me on Twitter







If I answered something that you think should be in the documentation, please take the initiative and add it to the community documentation. We really need people to help out here and build a well-organised large support resource.
Back to the top
 
Posted
Rating:
#86886
BobS
Avatar

Community saint
I think that this notification could benefit greatly from the inclusion of the IP address that the admin logged in from. Without it, it's like only half the information is available as you cannot immediately see dubious IP addresses used by a legitimate admin user.

Bob
Back to the top
 
Important!
Posted
Rating:
#86944
Chris Graham
Avatar

ocStaff (admin)

Automated fix message

BobS said

I think that this notification could benefit greatly from the inclusion of the IP address that the admin logged in from. Without it, it's like only half the information is available as you cannot immediately see dubious IP addresses used by a legitimate admin user.

Bob
This issue has been filed on the tracker as issue #582, with a fix.


Become a fan of ocPortal on Facebook or add me as a friend.

Expand: Was I helpful? Was I helpful?

Expand: Follow me on Twitter Follow me on Twitter







If I answered something that you think should be in the documentation, please take the initiative and add it to the community documentation. We really need people to help out here and build a well-organised large support resource.
Important!
 
1 guests and 0 members have just viewed this: None
Control functions:
 Add topic 
> Forum home » Deploying

Quick reply   Contract

Your name:
Your message:
( First post )