Project

General

Profile

Actions
Copy link

Bug #51941

closed

Exclusive FE usage flag in configuration has no effect

Added by Marco Zanter over 10 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Authentication
Target version:
-
Start date:
2013-09-12
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
6.1
PHP Version:
Tags:
Complexity:
hard
Is Regression:
No
Sprint Focus:

Description

because authUser in SaltedPasswordService.php always return 0, if authentication fails.
Line 215:

if (intval($this->extConf['onlyAuthService']) || $this->authenticationFailed) {
    $OK = 0;
}

Should be:

if (intval($this->extConf['onlyAuthService'])) {
    $OK = 0;
}

Related issues 1 (0 open — 1 closed)

Related to TYPO3 Core - Bug #22030: Authentication Bypass in frontend user authentication (sysext:saltedpasswords)ClosedMarcus Krause2010-01-30

Actions
Actions
Copy link

Also available in: Atom PDF