Support

Well, I would never create a feature which would give you the password of a successful login. That would be extremely insecure. Having an email everytime someone logs in to your site? This is not a very good idea and certainly not an exact science. It would only show you who has used the login form. If they are returning visitors (their session expired but they have a "Remember me" cookie) they are silently logged in. This won't be caught by any Joomla! plugin. Moreover, getting an email every time someone logs in will result in an avalanche of emails and I can't see any security benefit from that. It just sounds as if you want to collect all users' passwords?!

I had originally (read: 18 months ago) thought of using a log table to log who logs in and when. The problem is, the table would fill up with hundreds of thousands of records. In the meantime I found out that it didn't give me any useful analytics, so I scrapped that idea. Instead, searching the server access logs for the login form's target URL is a good measure of how many people try to log in in a given period of time. Maybe that's what you're looking for?

Well, the access log is a plain text file, but it's inaccessible to Joomla!, ergo what you ask is not possible. You can, however, scan it very easily manually. Logging logins does not serve any security purpose, therefore that's not a feature I am particularly interested in including in Admin Tools. The only security-related logging which makes sense is a. failed login attempts (can indicate someone trying to brute force your username/password) and b. administrator logins. Both are being logged by Admin Tools, so I consider the login-related features complete.