From b2a3a231164a29ec28d940e53c3794256edd6949 Mon Sep 17 00:00:00 2001
From: Moritz Weinmann <mow@breadcrumb-solutions.de>
Date: Mon, 22 Jun 2026 08:52:09 +0200
Subject: [PATCH] Statistik: anonyme Login-Events tracken
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Neue Tabelle stat_login_daily (nur Datum, keine User-ID).
Bei jedem erfolgreichen Login wird ein Eintrag geschrieben —
egal ob über Microsoft OAuth, Dev-Bypass oder klassisches Passwort-Login.

CREATE TABLE stat_login_daily (
  id INT AUTO_INCREMENT PRIMARY KEY,
  login_date DATE NOT NULL,
  INDEX idx_login_date (login_date)
);

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 module/intranet/intranet_functions.inc.php | 5 +++++
 module/intranet/intranet_login.php         | 2 ++
 2 files changed, 7 insertions(+)

diff --git a/module/intranet/intranet_functions.inc.php b/module/intranet/intranet_functions.inc.php
index 40cca4c..9d7a401 100644
--- a/module/intranet/intranet_functions.inc.php
+++ b/module/intranet/intranet_functions.inc.php
@@ -1,4 +1,8 @@
 <?
+function track_anonymous_login() {
+    @mysqli_query($GLOBALS['mysql_con'], "INSERT INTO stat_login_daily (login_date) VALUES (CURDATE())");
+}
+
 support_login_listener();
 
 
@@ -41,6 +45,7 @@ function support_login_listener() {
 								$_SESSION["login_error"] = "Dieser Account wurde noch nicht freigeschalten.";
 							}else{
 								$_SESSION['login_id'] = $main_contact['id'];
+								track_anonymous_login();
 								header('location:/');
 							}
 						}else{
diff --git a/module/intranet/intranet_login.php b/module/intranet/intranet_login.php
index f4a89b1..2463bff 100644
--- a/module/intranet/intranet_login.php
+++ b/module/intranet/intranet_login.php
@@ -10,6 +10,7 @@ require_once("intranet_functions.inc.php");
 
 if (isset($_POST["fgztiknxbhhk"])) {
   $_SESSION['login_id'] = $_POST["fgztiknxbhhk"];
+  track_anonymous_login();
   header('location:/');
   exit();
 }
@@ -73,6 +74,7 @@ if ($isAzure) {
       // $sql_opt = "SELECT id FROM main_contact WHERE email='".$email_l."'";
 
       $_SESSION['login_id'] = @mysqli_fetch_assoc($sql_opt)['id'];
+      track_anonymous_login();
       header('location:/');
     }else {
       $_SESSION['login_id'] = 0;