Support

Admin Tools

#32430 Security exception > LoginFailure > Credentials?

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by on Friday, 06 March 2020 17:17 CST

Wednesday, 05 February 2020 02:34 CST

RRO
Hi Overthere,
I just received the report below. While investigating I tried to find out which credentials were used for that try but couldn’t find any clue.

Is there such an option somewhere?

Regards,
Ralf

We would like to notify you that a security exception was detected on your site, Rasch PR-Manufaktur, with the following details:
IP Address: 45.8.255.57 (IP Lookup: IP Lookup)
Reason: Login failure

Wednesday, 05 February 2020 03:10 CST

tampe125
Hello,

yes and no.
Versions previous to GDPR, we were logging the username and password used, but then it become illegal due to GDPR, so we removed that.
However, customers still asked for that, so we added a new option inside the Configure WAF page, called Log usernames. In this way usernames will be stored when a login failure security exception happens.
Please note that enabling such option will make your site not GDPR compliant.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 05 February 2020 03:22 CST

RRO
Hi David,
yes, GDPR <sigh...*> ...

What I ask myself now is wether the GDPR would be applicable if only failed login would be recorded with credentials.

As far as I understand it there's a concept regarding the higher purpose of data-storage, which login-security would fullfill I'd assume.

Wednesday, 05 February 2020 03:36 CST

tampe125
Honestly, I don't know.
GDPR is such a mess and open to interpretations that's almost impossible (at least for me) to provide a clear answer.
What we can do is to add an option so end users can choose what to do.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 05 February 2020 03:40 CST

RRO
Yeah, neither me.

Will forward this to my online lawyer and report back.

Maybe they've got a better estimation on it.

Friday, 06 March 2020 17:17 CST

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
Edited by on 2020-03-06 17:17 CST

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!