Login ?

[jonnielaw]

I have gotten a login page constructed and it works correctly (thanks to Rich) and now I am interested in if it is possible for Alpha 5 to show me how is and isn't log in.

What I am wanting is an audit page, for example I regularly visit a secure webpage, and am an administrator for it. In this webpage is the ability for me too see who has been on and where they have gone.

I would like to be able to do this on my webpages, after someone logs in it makes a log of when they logged in and stores it so I can review it.

THe problem is I have no idea how or if this is even possible if someone out there could help me I would appreciate it very much

Thanks for your time (hope what I am asking for makes sense)
Dale

[Steve Wood]

I have an example of this at my website (address below) under the Products heading, titled "Website Traffic and Audit Trail".

[jonnielaw]

Cool thank you I will try to make heads and tails of it

Thanks
Dale

[jonnielaw]

Cool thank you I will try to make heads and tails of it

Thanks
Dale

I looked at it and it is exactly what I am looking to do. I don't need to be that complex I am looking for something simpler that would give me dates of when users logged in and times, and that is about it, I am not so concerned with what they look at.

Any ideas on how I might start developing this.

Any help would be appreciated

Thanks
Dale

[Steve Wood]

You create an A5W page that is called with a5w_include() on each page you want to audit. The A5W page has to write a record to a table in your Alpha application. You can write things like any session variable (such as their login username, session id, etc.).

[Steve Wood]

If you just want to know 'who logged on, and when', then add something like this to the aftervalidate event for your logindialog:

cs = session.username + crlf() + session.timestamp
record_add("<ADB_Path>\was_usage.dbf", cs, 2)

Where session.username is whatever variable you use in your login dialog for the login id, and was_usage is a table with two fileds to match the two fields in the first line. That gives you who & when, without duration, specific pages visited, etc.

[jonnielaw]

Cool

Thanks steve I will try that

[jonnielaw]

Steve I tried it but couldnt get it too work here is what I have in my
AfterValidate in my LoginDialog page

session.__Protected__Logged_In = .t.
if eval_valid("session.targetUrl") then
if session.targetURL <> "" then
Currentform.RedirectTarget = session.targetURL
else
currentform.redirectTarget = "Main.a5w"
end if
else
currentform.redirectTarget = "Main.a5w"
end if

Where would I put the stuff you gave me to make it work, I made a table with the 2 columns but I can't figure out where to put this in the login dialog:


cs = session.username + crlf() + session.timestamp
record_add("<ADB_Path>\was_usage.dbf", cs, 2)


Thanks for the help Steve,

Dale

[Steve Wood]

It would go on top of your other statements. Don't forget to replace session.username with whatever YOUR control name is for your login ID. And, be sure the login id control's scope is "Session". And, I used "<ADB_Path>" in my statement, but I have no idea if you have that as an alias in your Profle or if the value is accurate.

When you say it doesn't work, what actually happens? What is the error code, etc.

[jonnielaw]

There was no code error at all. It merely would not add anything to the table i had created. I did have it at the top of my statement, prior to todays posts, but i failed to check and make sure the session.--- was the same as my login.

I am not sure what you mean with this "And, be sure the login id control's scope is "Session"."

And I know that the "<ADB_Path>" statement works as I have used it elsewhere in my program.


Thanks for the all the help.

Dale

[Steve Wood]

Hmm, don't know. You can test the function with something like:

cs = "Dale" + crlf() + "01/01/2004"
record_add("<ADB_Path>\was_usage.dbf", cs, 2)

You could also test that outside of your component, right in the Interactive Window. Also, be sure the timestamp field in your table is a Time field type.

[peteconway]

This works. - follow it.

Cut/Pasre/Edit:

cs = session.WASDemo.UserName + crlf() + session.timestamp 
record_add("<ADB_Path>\was_usage.dbf", cs, 2)

if eval_valid("session.WASDemo.targetUrl") then 

	if session.WASDemo.targetURL <> "" then 
		Currentform.RedirectTarget	= session.WASDemo.targetURL

    else
		response.redirect("alphafivemewelcome.a5w")
	end if
else
		response.redirect("alphafivemewelcome.a5w")
	
end if  

session.WASDemo.FlagIsLoggedIn = .t.

[jonnielaw]

Thanks fellas

I will see if they work and let you all know

Thanks
Dale

[jonnielaw]

OKay Steve tried what you said and this is what has happened:

I tried this one

cs = "Dale" + crlf() + "01/01/2004"
record_add("<ADB_Path>\was_usage.dbf", cs, 2)

and it worked fine

Now I went and added this to the top of my AfterValidate events

cs = session.user_name + crlf() + session.timestamp
record_add("<ADB_Path>\was_usage.dbf", cs, 2)

And I got this message:

Errors in: event.AfterValidate code:
Property not found
session.User_name subelement not found.

I changed the scope from local to session and got this one:

Errors in: event.Form Level Validate code:
Variable "user_name" not found.

Now if I change the scope back to local, save it and try to log in I can log in and it will save it to my usage table, However once I try to log back in I get the first error.

This is what is in my Validate area:

if user_name = "" .or. password = "" then
currentform.has_error = .t.
currentform.error_message = "Invalid user name or password."
else
dim correct_password as c
DIM level AS N

correct_password = lookup("[PathAlias.ADB_Path]\user_names","user_name=" + quote(user_name),"password")
if correct_password = password then
level = lookup("[PathAlias.ADB_Path]\user_names","user_name=" + quote(user_name),"level")
session.__protected__SecurityLevel = level
session.__protected__UserName = user_name
ELSE
currentform.has_error = .t.
currentform.error_message = "Invalid user name or password."
end if
end if

And this is what is in my AfterValidate area:

session.__Protected__Logged_In = .t.
if eval_valid("session.targetUrl") then
if session.targetURL <> "" then
Currentform.RedirectTarget = session.targetURL
else
currentform.redirectTarget = "Main.a5w"
end if
else
currentform.redirectTarget = "Main.a5w"
end if

Any ideas

Thanks
Dale

[peteconway]

Check it.

is it ....cs = session.user_name + crlf() + session.timestamp

or ....cs = session.username + crlf() + session.timestamp

Like the error says: Variable "user_name" not found.