I have finished v5.2.1.02 of this mod with these changes:
- Added a number of event flags to be logged in the Event Logging module. All are logged under the category "Security" and actual failed attempts at login, captcha, override codes, etc will show as alerts while other lower risk events will show as warnings.
- Check config.php file permissions to ensure that only the owner can read it. Check for the config.php.sample file as this may also contain database password info if not deleted during the installation. This can help avoid database intrusion on a shared host but this check can be disabled if this is not a concern.
- Fixed numerous PHP errors.
- Added a number of event flags to be logged in the Event Logging module. All are logged under the category "Security" and actual failed attempts at login, captcha, override codes, etc will show as alerts while other lower risk events will show as warnings.
- Check config.php file permissions to ensure that only the owner can read it. Check for the config.php.sample file as this may also contain database password info if not deleted during the installation. This can help avoid database intrusion on a shared host but this check can be disabled if this is not a concern.
- Fixed numerous PHP errors.