SensorUserFailedLogins.php in Monitoring 7

Contains \Drupal\monitoring\Sensor\Sensors\SensorUserFailedLogins.

Namespace

Drupal\monitoring\Sensor\Sensors

File

lib/Drupal/monitoring/Sensor/Sensors/SensorUserFailedLogins.php

<?php

/**
 * @file
 * Contains \Drupal\monitoring\Sensor\Sensors\SensorUserFailedLogins.
 */
namespace Drupal\monitoring\Sensor\Sensors;

use Drupal\monitoring\Result\SensorResultInterface;

/**
 * Monitors user failed login from dblog messages.
 *
 * Helps to identify bots or brute force attacks.
 */
class SensorUserFailedLogins extends SensorDatabaseAggregator {

  /**
   * {@inheritdoc}
   */
  public function buildQuery() {
    $query = parent::buildQuery();
    $query
      ->addField('watchdog', 'variables');
    $query
      ->groupBy('watchdog.variables');
    return $query;
  }

  /**
   * {@inheritdoc}
   */
  public function runSensor(SensorResultInterface $result) {
    $records_count = 0;
    foreach ($this
      ->getQueryResult()
      ->fetchAll() as $row) {
      $records_count += $row->records_count;
      $variables = unserialize($row->variables);
      $result
        ->addStatusMessage('@user: @count', array(
        '@user' => $variables['%user'],
        '@count' => $row->records_count,
      ));
    }
    $result
      ->setValue($records_count);
  }

}

Classes

Name	Description
SensorUserFailedLogins	Monitors user failed login from dblog messages.