Project

General

Profile

Actions

Task #52043

closed

AbstractUserAuthentication::checkAuthentication fail to log unknown username

Added by Sebastian Fischer over 10 years ago. Updated over 10 years ago.

Status:
Rejected
Priority:
Should have
Category:
-
Target version:
-
Start date:
2013-09-16
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

If a user logs in with an unknown username the login try does not get logged. Based on this its not possible to display messages based on the count of failed logins. On the other side its possible to "guess" usernames be different behaviour of the loginscreen. Because of this it would be good to write a failed login to sys_log even with an unknown username.

Actions

Also available in: Atom PDF