Manual:Hooks/LoginAuthenticateAudit

Details

 * $user - The User object being authenticated against.
 * $password - The password being submitted and found wanting.
 * $retval - A LoginForm class constant with authenticateUserData return value (SUCCESS, WRONG_PASS, etc).

With the introduction of AuthManager in 1.27, this hook was replaced by.