Fix to stop false positive syslogging on page reload

This commit is contained in:
Ilia Rostovtsev
2020-10-16 19:59:53 +03:00
parent 523bdc0066
commit cf6eeadaa3

View File

@@ -4221,6 +4221,13 @@ else {
$already_session_id = undef;
$method = "GET";
$authuser = $baseauthuser = undef;
# If login page is simply reloaded, with `session_login.cgi` in URL,
# without having any parameters sent (user set to empty), don't log
# false positive attempt with `Invalid login as from IP` to syslog
$nolog = 1 if (!$vu);
# Send to log if allowed
syslog("crit", "%s",
($nonexist ? "Non-existent" :
$expired ? "Expired" : "Invalid").