function security_review_check_failed_logins_help in Security Review 7

Same name and namespace in other branches

1. 6 security_review.help.inc \security_review_check_failed_logins_help()

File

./security_review.help.inc, line 204

Main help definition.

Code

function security_review_check_failed_logins_help($check = NULL, $skipped_message = NULL) {
  $element['title'] = t('Abundant failed logins from the same IP');
  $element['descriptions'][] = t("Failed login attempts from the same IP may be an artifact of a malicous user attempting to brute-force their way onto your site as an authenticated user to carry out nefarious deeds. ");
  if (!empty($skipped_message)) {
    $element['findings']['descriptions'][] = $skipped_message;
  }
  elseif ($check && $check['result'] == FALSE) {
    $element['findings']['descriptions'][] = t('The following IPs were observed with an abundance of failed login attempts.');
    foreach ($check['value'] as $ip) {
      $element['findings']['items'][] = array(
        'safe' => check_plain($ip),
        'raw' => $ip,
      );
    }
  }
  return $element;
}