log a warning on recovery of old recovery codes

darcs-hash:20080930124452-5ed1f-31cc4ff18994880f9ab36b57cdfc6d9fb19b99d1.gz

diff --git a/actions/recoverpassword.php b/actions/recoverpassword.php
index 0f390154341214d829499d3b3b38f49ce69b3a30..1f2cff197513796e858e6749c3592bf7372cca8a 100644 (file)
--- a/actions/recoverpassword.php
+++ b/actions/recoverpassword.php
@@ -85,6 +85,9 @@ class RecoverpasswordAction extends Action {
                # Note: it's still deleted; let's avoid a second attempt!
 
                if ((time() - $touched) > MAX_RECOVERY_TIME) {
+                       common_log(LOG_WARNING, 
+                                          'Attempted redemption on recovery code ' .
+                                          'that is ' . $touched . ' seconds old. ');
                        $this->client_error(_('This confirmation code is too old. ' .
                                               'Please start again.'));
                        return;