user audit

[Anon]

I am running a site where users can log into the admin section using htaccess and make changes with set php code. Currently there is no logging in place to audit changes. I want to be able to track who logged in, time stamp, and all commands and possible changes to information. The information they change is stored in an ldap/x500 directory server, server is running unix, apache and php3. any suggestions

[brandonschnell]

i use wrapper functions (ie query() calls log_this() then runs mysql_db_query() ) for functions that access the database. before any changes are made it records to a log table a timestamp, username, priority (logon = low, data change = medium, error/major database change = high) and the sql command that was used (careful about passwords). you could probably do something similiar here.