session user to apache log?

degerstrom

I'm wondering if there's a way to set any sort of Apache (or other) variable, that makes my PHP+session authenticated user names show up in my server logs?

If you log on using basic http authentication, the user name shows up in the request string in the access log, which is handy when analyzing the logs - I'd like to do the same with my new, fabulous site :-)

I've tried setting $_SERVER['REMOTE_USER'], but no luck.

Can anyone offer any advice?

Pål

Frosty-z

Even if the answer comes nearly 3 years after your question, it may help some other people trying to do the same.

Like you, I have tried to use $SERVER['REMOTE_USER'], $SERVER['PHP_AUTH_USER'], etc. without success.

But after some googling I got the answer (http://www.phpbuilder.com/lists/php3-list/199909/2128.php) : use the Apache "note" variables. Since we can change them from PHP, and write a "note" variable into the log files, we can do the job 🙂

So, in the Apache configuration file, set the log format (ex. combined for me) :

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

To something like

LogFormat "%h %{login}n %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

Then, in PHP, you just have to do for example :

session_start();
   apache_note("login", isset($_SESSION['login']) ? $_SESSION['login'] : '-');

Should be Ok.

Frosty-z

I have noticed that I have provided a wrong log format

Correct is :

LogFormat "%h %l %{login}n %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined