don't syslog() login attempts unless ['syslog'] is enabled

1 files changed, 2 insertions, 1 deletions

diff --git a/mod.php b/mod.php
index 36c7a2f8..5822e3b5 100644
--- a/mod.php
+++ b/mod.php
@@ -33,7 +33,8 @@
 			
 			
 			if(!login($_POST['username'], $_POST['password'])) {
-				_syslog(LOG_WARNING, 'Unauthorized login attempt!');
+				if($config['syslog'])
+					_syslog(LOG_WARNING, 'Unauthorized login attempt!');
 				loginForm($config['error']['invalid'], $_POST['username'], '?' . $query);
 			}