From 15a089f46efa0cf0dad7959af2967dccd9a7b8e6 Mon Sep 17 00:00:00 2001
From: Evan Prodromou <evan@controlyourself.ca>
Date: Tue, 30 Sep 2008 08:44:52 -0400
Subject: [PATCH] log a warning on recovery of old recovery codes

darcs-hash:20080930124452-5ed1f-31cc4ff18994880f9ab36b57cdfc6d9fb19b99d1.gz
---
 actions/recoverpassword.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/actions/recoverpassword.php b/actions/recoverpassword.php
index 0f39015434..1f2cff1975 100644
--- a/actions/recoverpassword.php
+++ b/actions/recoverpassword.php
@@ -85,6 +85,9 @@ class RecoverpasswordAction extends Action {
 		# Note: it's still deleted; let's avoid a second attempt!
 
 		if ((time() - $touched) > MAX_RECOVERY_TIME) {
+			common_log(LOG_WARNING, 
+					   'Attempted redemption on recovery code ' .
+					   'that is ' . $touched . ' seconds old. ');
 			$this->client_error(_('This confirmation code is too old. ' .
 			                       'Please start again.'));
 			return;