This optional parameter specifies the SQL query that is used
to log authentication failures if LogFailure is enabled (LogFailure is
enabled by default). There is no default. If FailureQuery is not defined
(which is the default), no logging of authentication failures occur. In
the query, special formatting characters are permitted.
- %0 is replaced with the message severity level.
- %1 is replaced with the quoted reason message.
- %2 is replaced with the SQL quoted User-Name.
- %3 is replaced with the SQL quoted decoded plaintext password (if
any).
- %4 is replaced with the SQL quoted original user name from the
incoming request (before any RewriteUsername rules were applied)
- %5 is replaced with tracing identifier.
