Which users have logged in recently?

[psamuels56]

Happy Holidays to everyone in the Alpha community. I wish you all the best for the year ahead.

I received a call from a customer tonight telling me that one of her employees left the company on bad terms and may have used his user name and password to log onto their application to retrieve proprietary information. Of course, I immediately deleted that user's account and login credentials, but she wanted to know if he actually logged in during the past few days, while the office was closed.

So, that's my question to you: Is there a "log" file that tells which users have logged in/out recently, with the times of login and logout? I saw the "Access Log" on the server, but it doesn't appear to show user names or log in/log out information. I can probably create a script that will do this in the future, but I was hoping there was something built into the application server could would give this information.

I'd appreciate any help or suggestions about how I can get this information.

Thanks,
Phil

[Ted Giles]

Re: Which users have logged in recently?

This reinforces the need for Human Resources, or management to carry out proper exit control.
The government departments I have worked in had varying degrees of people exit strategies, but the overriding one was immediate accout deactivation on the day if leaving - for whatever reason.
I'm afraid I don't have a definitive answer, but I imagine that there is something similar on the Web side like the Audit Trail in Desktop, but that has to be turned on.

[GGandhi]

Re: Which users have logged in recently?

i simply have another editable grid based on the web_user table., seen by the administrator only where you remove the non employee when they leave. (or change their status to something else which prohibits access if you like that idea).

[Pat Bremkamp]

Re: Which users have logged in recently?

We keep a "login history" table that we created. We have a page called "startup" where everyone is sent when they log in, and that's where we assign session variables and redirect to the right place. So, we just added an insert to the table there. I often go there to check which clients logged in this morning, and to check if employees are logging in to multiple sessions (they are).

[Ted Giles]

Re: Which users have logged in recently?

Using Pats method, It's possible to trap people who are already logged in and stop multiple sessions if you catch the login/logout information. You also need to catch the X box Windows application close if it's allowed.
The Web apps I build have a User table which is used to create an IMDB as people join or leave. Attaching an activity log to capture specific operations - CRUD for the user is possible.
Only Admin people have access to creating/deleting/restricting users.

[Peter.Greulich]

Re: Which users have logged in recently?

Alpha has a "built-in" login function that can track logins & logouts. You have to enable it. You will also need to build your own table which the login function will point to. Easy to do, really. I use it on all my sites.

Login Activity.png

The function looks like this:

function saveLoginLog as v (e as p)
'-- Values Available - Data type - Description
'e.session - Pointer - session variables. TIP: To set a session variable: e.Session.myNewSessionVariable = "Alpha"
'e.userid - Character - userid of the logged in user
'e.ulink - Character - 'ulink' value saved for the logged in user (not available in IIS)
'e.passexp - Time - a time value indicating when the user's password will expire (not available in IIS)
'e.loginexp - Time - a time value indicating when the login will expire (not available in IIS)
'e.loginerror - Character - any error message returned if a login activity failed
'e.loginaction - Character - The login activity action, such as Login Succeeded, Login Failed
'e.IP - Character - IP address of the remote client making the request
'e.logout - Logical - Default is .F., will be .T. if the action is a 'log out'
''===============================================================================
Dim conn as SQL::connection
Dim args as SQL::Arguments
Dim SQL as c

vHost = request.host
vNow = now()

If e.logout = .T.
	vType = "LogOut"
	vExpires = vNow 
Else
	vType = "LogIn"
	vExpires = vNow + (session.timeout*60)
End If

args.add("LoginName",e.userid)
args.add("DateTime",vNow)
args.add("Type",vType)
args.add("IP",e.IP)
args.add("LogExpires",vExpires)
args.add("PwdExpires",e.passexp)
args.add("LogError",e.loginerror)
args.add("Host",vHost)

SQL = "INSERT INTO Sys_Login_Activity (LogLoginName, LogDateTime, LogType, LogIP, LogExpires, LogPwdExpires, LogError, LogHost) VALUES (:LoginName, :DateTime, :Type, :IP, :LogExpires, :PwdExpires, :LogError, :Host)"

conn.open("::Name::XXXXXXXXXX")							
conn.execute(SQL, args)
conn.close()

end function

[psamuels56]

Re: Which users have logged in recently?

Wow! You are terrific. Thank you for taking your valuable time to respond. I really appreciate it.

In this case, it's NOT really a Human Resources situation. It appears that the employee was trying to start a competing company while he was still working there (they immediately fired him and removed his login when they discovered this). Because the last 2 weeks have had only limited activity, the company's owner was curious about whether the employee was logging in to steal information (e.g. Customer Lists, etc.), prior to letting them know he was leaving. That's what I was trying to learn!

I love Peter's response... I didn't notice that functionality built into Alpha (I just activated and tested it), but it's exactly what I would have needed. Oh well! Going forward, I intend to use it in all future applications... AND probably plan to retrofit my existing apps.

Thanks again for all your help. Best wishes for a happy, healthy and successful New Year.

[iRadiate]

Re: Which users have logged in recently?

Alpha has a "built-in" login function that can track logins & logouts. You have to enable it. You will also need to build your own table which the login function will point to. Easy to do, really. I use it on all my sites.

[ATTACH=CONFIG]42911[/ATTACH]

The function looks like this:

function saveLoginLog as v (e as p)
'-- Values Available - Data type - Description
'e.session - Pointer - session variables. TIP: To set a session variable: e.Session.myNewSessionVariable = "Alpha"
'e.userid - Character - userid of the logged in user
'e.ulink - Character - 'ulink' value saved for the logged in user (not available in IIS)
'e.passexp - Time - a time value indicating when the user's password will expire (not available in IIS)
'e.loginexp - Time - a time value indicating when the login will expire (not available in IIS)
'e.loginerror - Character - any error message returned if a login activity failed
'e.loginaction - Character - The login activity action, such as Login Succeeded, Login Failed
'e.IP - Character - IP address of the remote client making the request
'e.logout - Logical - Default is .F., will be .T. if the action is a 'log out'
''===============================================================================
Dim conn as SQL::connection
Dim args as SQL::Arguments
Dim SQL as c

vHost = request.host
vNow = now()

If e.logout = .T.
	vType = "LogOut"
	vExpires = vNow 
Else
	vType = "LogIn"
	vExpires = vNow + (session.timeout*60)
End If

args.add("LoginName",e.userid)
args.add("DateTime",vNow)
args.add("Type",vType)
args.add("IP",e.IP)
args.add("LogExpires",vExpires)
args.add("PwdExpires",e.passexp)
args.add("LogError",e.loginerror)
args.add("Host",vHost)

SQL = "INSERT INTO Sys_Login_Activity (LogLoginName, LogDateTime, LogType, LogIP, LogExpires, LogPwdExpires, LogError, LogHost) VALUES (:LoginName, :DateTime, :Type, :IP, :LogExpires, :PwdExpires, :LogError, :Host)"

conn.open("::Name::XXXXXXXXXX")							
conn.execute(SQL, args)
conn.close()

end function

I'd like to try this. Where is the property to turn on the feature? I can't seem to find it. Thanks.

[Peter.Greulich]

Re: Which users have logged in recently?

See image...

Login Function.png

[iRadiate]

Re: Which users have logged in recently?

Thanks Peter

[iRadiate]

Re: Which users have logged in recently?

I'm displaying this in a UX list component but there seems to be something 'funny' with the way e.loginerror renders the row.
For all the other e object data values, the row displays correctly on a single line. But e.loginerror causes the row to render approx 3x the normal height which makes for an odd looking list.
The screenshot shows this:

LoginError.png

I've played around with many of the data in-line style properties such as whitespace, width, font, etc. to no avail. I thought about a ltrim or alltrim but I don't know how you would apply it to e.loginerror.

Does this sound like it could be a bug?

[Peter.Greulich]

Re: Which users have logged in recently?

I doubt it. When I have log errors that doesn't happen.

[iRadiate]

Re: Which users have logged in recently?

You're using a grid not a UX list aren't you?

It's very strange that it is only e.loginerror that does this

[Peter.Greulich]

Re: Which users have logged in recently?

Oh I see. Yes, a grid.

[psamuels56]

Re: Which users have logged in recently?

After following Peter's instructions, I added this to my applications, using a grid, also and I am not getting any errors. FYI, I know Grids are a "out of favor", but for this function, setting it up was fast and easy and worked (with the search functions I wanted) perfectly.

Thanks Peter