Capture IP address during forgotten password process?

tford

Is there any way to capture the IP address of people who are trying to retrieve a forgotten password using a process marked with "handles 'forgotten password' functionality"?

rocketman

Hi Tom.

I have this as a rule in Notifications/LoginNotification/When LoginNotification is Received

Log the Member In

IF NOT(EXISTS UserLog WHERE (UserLog.Mem_Login=LoggedInSystemUser.LoginName AND UserLog.LogoutTime IS UNDEFINED))THEN CREATE UserLog WITH UserLog.LoginTime=CURRENT_TIMESTAMP,UserLog.Mem_Num=LoggedInSystemUser,UserLog.RerringURL=LoginNotification.ReferringURL, UserLog.RemoteAddress=LoginNotification.RemoteAddress, UserLog.SessionID=LoginNotification.SessionId

It probably needs tweaking but I'm sure LoginNotification gets called no matter what, so the user's IP address should be in LoginNotification.RemoteAddress

rocketman

Can Confirm that the above code wrote an entry in UserLog which contained IP (RemoteAddress) and Session ID but no User name or LoginName Information. So Tying up the ip with a user might be a bit tricky

tford

Thanks Rocketman. Good to know.

SESSION_ID is available in any rule, so I should be able to marry up the two pieces of info. I'll just add a polling of the session ID in my Forgotten Password process.