Bug #22528
closed
Redirect URL for backend login is lost when entering wrong information
0%
Description
When passing a redirect URL to the backend login, the redirect will not happen, if the user enters wrong credentials.
- Call http://www.domain.tld/typo3/index.php?redirect_url=http%3a%2f%2fwww.google.at (Substitute the redirect_url with anything you like).
- Enter wrong user credentials.
- Enter valid user credentials.
You will be redirected to /typo3/backend.php.
(issue imported from #M14224)
Files
Updated by
Updated by Oliver Hader almost 14 years ago
Hm, could not reproduce with TYPO3 4.4 or 4.3...
Are there any special settings required? Besides that redirecting to external URLs should not be possible at all...
Updated by Reinhard Führicht almost 14 years ago
Maybe the Google URL was a bad example.
Try it this way:
- Navigate to http://www.domain.tld/typo3/index.php?redirect_url=/index.php
- Enter wrong user credentials.
- Enter valid user credentials.
Just tested it with 4.5dev. The problem still exists.
Updated by Steffen Kamper about 13 years ago
Committed to svn
4_5 rev 10567
trunk rev 10568