> What about someone who can't log in using a browser which is not their usual? You're assuming a couple things about our hypothetical login_audit table, neith

> What about someone who can't log in using a browser which is not their usual? You're assuming a couple things about our hypothetical login_audit table, neither of which are neccesarily true and both of which would make our audit table functionally as useless (at least to me) as the OP's site * That we only store the last useragent * Only successful logins are recorded In the latter case, I probably needn't (but I will) point out that failure to make any entry in the table would imply more serious connectivity issues being afoot.