feat(security): implement SOC 2 & ISO 27001 audit logging, password policy, and session timeout

2026-09-11 15:35:47 +02:00
parent 88ec1418cf
commit 0942a94edd
12 changed files with 283 additions and 14 deletions
@@ -1,4 +1,4 @@
-<?php
+<?php
 /**
 * Fociz Nieuwe Inloglocatie / IP Verificatie
 */
@@ -43,6 +43,7 @@ if (empty($token) || !preg_match('/^[a-f0-9]{64}$/', $token)) {
            $success = true;
            $userEmail = $record['email'];
            $ipAddress = $record['ip_address'];
+            fociz_log_audit((int)$record['user_id'], 'IP_VERIFIED', 'user_known_ips', (int)$record['id'], ['ip' => $ipAddress], 'SUCCESS', $userEmail);
        }
    } catch (Throwable $e) {
        error_log("verify-ip.php error: " . $e->getMessage());