Add audit logging of POST actions

1 files changed, 7 insertions, 0 deletions

diff --git a/index.php b/index.php
index 73dc6e0d..85f2970e 100644
--- a/index.php
+++ b/index.php
@@ -178,6 +178,13 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
 	}
 }
 
+// Auditing - log any post requests, but mask potential password fields.
+// This REQUIRES naming those form fields accordingly
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+	$mod = Page::getModule();
+	Audit::run($mod ? $mod->getIdentifier() : strtolower($_POST['do'] ?? '???'));
+}
+
 // AJAX Stuff? Just do so. Otherwise, run preprocessing
 if (AJAX) {
 	ob_start('ob_gzhandler');