Project

General

Profile

Actions

Feature #20209

closed

fe_users.email should be unique if "forgot password" is used in fe_login

Added by Nabil Sayegh over 15 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
felogin
Target version:
-
Start date:
2009-03-19
Due date:
% Done:

0%

Estimated time:
PHP Version:
5.2
Tags:
Complexity:
Sprint Focus:
Needs Decision

Description

The email attribute of fe_users is used to identify the tuple, so it should be unique.

ALTER TABLE fe_users ADD unique (email);
(issue imported from #M10728)


Related issues 2 (0 open2 closed)

Related to TYPO3 Core - Bug #20210: fe_login: Forgot Password should not send passwords if they are hashed (md5)Closed2009-03-19

Actions
Related to TYPO3 Core - Epic #84262: [FEATURE] Update felogin to extbaseClosedHenning Liebe2013-08-16

Actions
Actions #1

Updated by Alexander Opitz over 11 years ago

  • Status changed from New to Needs Feedback
  • Target version deleted (0)

The issue is very old, does this issue exists in newer versions of TYPO3 CMS (4.5 or 6.1)?

Actions #2

Updated by Alexander Opitz about 11 years ago

  • Status changed from Needs Feedback to Closed

No feedback for over 90 days.

Actions #3

Updated by Jonas Eberle almost 10 years ago

  • Status changed from Closed to New

Yes, this issue still exists. (Typo3 CMS 6.2)
I would say the same holds true for usernames.

Actions #4

Updated by Susanne Moog over 9 years ago

  • Sprint Focus set to PRC
Actions #5

Updated by Jigal van Hemert over 9 years ago

Because it's possible to have several websites in a single installation we can't use the db (within DBAL limitations) to enforce the uniqueness.
In the username property the TCA is already configured to only allow unique username in a folder.

So, instead of changing the db configuration, I'd change the TCA configuration.

Actions #6

Updated by Riccardo De Contardi over 8 years ago

  • Category set to felogin
Actions #7

Updated by Jan Stockfisch over 6 years ago

  • Related to Epic #84262: [FEATURE] Update felogin to extbase added
Actions #8

Updated by Daniel Goerz almost 5 years ago

  • Status changed from New to Closed

Hi. In v10 the password recovery functionality has been changed to identify the user by the hash and no longer by email. However, this change will not be backported to v9 because it was part of a larger refactoring. Therefore I am closing this issue now.

Actions #9

Updated by Benni Mack over 4 years ago

  • Sprint Focus changed from PRC to Needs Decision
Actions

Also available in: Atom PDF