1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
<?php
/**
* Logging functionality for webserver.
*
* This includes web server specific code to log some information.
*/
declare(strict_types=1);
namespace PhpMyAdmin;
use function closelog;
use function date;
use function error_log;
use function function_exists;
use function openlog;
use function syslog;
use const LOG_AUTHPRIV;
use const LOG_NDELAY;
use const LOG_PID;
use const LOG_WARNING;
/**
* Misc logging functions
*/
class Logging
{
/**
* Get authentication logging destination
*
* @return string
*/
public static function getLogDestination()
{
$log_file = $GLOBALS['config']->get('AuthLog');
/* Autodetect */
if ($log_file === 'auto') {
if (function_exists('syslog')) {
$log_file = 'syslog';
} elseif (function_exists('error_log')) {
$log_file = 'php';
} else {
$log_file = '';
}
}
return $log_file;
}
/**
* Generate log message for authentication logging
*
* @param string $user user name
* @param string $status status message
*
* @return string
*/
public static function getLogMessage($user, $status)
{
if ($status === 'ok') {
return 'user authenticated: ' . $user . ' from ' . Core::getIp();
}
return 'user denied: ' . $user . ' (' . $status . ') from ' . Core::getIp();
}
/**
* Logs user information to webserver logs.
*
* @param string $user user name
* @param string $status status message
*/
public static function logUser($user, $status = 'ok'): void
{
if (function_exists('apache_note')) {
apache_note('userID', $user);
apache_note('userStatus', $status);
}
/* Do not log successful authentications */
if (! $GLOBALS['config']->get('AuthLogSuccess') && $status === 'ok') {
return;
}
$log_file = self::getLogDestination();
if (empty($log_file)) {
return;
}
$message = self::getLogMessage($user, $status);
if ($log_file === 'syslog') {
if (function_exists('syslog')) {
@openlog('phpMyAdmin', LOG_NDELAY | LOG_PID, LOG_AUTHPRIV);
@syslog(LOG_WARNING, $message);
closelog();
}
} elseif ($log_file === 'php') {
@error_log($message);
} elseif ($log_file === 'sapi') {
@error_log($message, 4);
} else {
@error_log(
date('M d H:i:s') . ' phpmyadmin: ' . $message . "\n",
3,
$log_file
);
}
}
}
|