Bug #90335

Login Failure Warning email doesn’t show IP addresses

Added by RVVN no-lastname-given over 1 year ago. Updated over 1 year ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2020-02-06
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
7.2
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Since TYPO3 9.5 the login failure warning email doesn’t contains IP addresses anymore. Instead there is a marker ###IP###.

This is a dump of the failures:

05-02-20 17:52:  Login-attempt from ###IP###, username 'johndoe' not found!!
05-02-20 18:01:  Login-attempt from ###IP###, username 'janedoe', password not accepted!
05-02-20 18:01:  Login-attempt from ###IP###, username 'janedoe', password not accepted!
05-02-20 18:02:  Login-attempt from ###IP###, username 'johndoe' not found!!

Is it some kind of anonymization ?

I checked the function BackendUserAuthentication::checkLogFailures() and it uses the raw log_data from sys_log without replacing this marker.

#1

Updated by Georg Ringer over 1 year ago

  • Status changed from New to Accepted
#2

Updated by Gerrit Code Review over 1 year ago

  • Status changed from Accepted to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63249

#3

Updated by Gerrit Code Review over 1 year ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63249

#4

Updated by Gerrit Code Review over 1 year ago

Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63229

#5

Updated by Georg Ringer over 1 year ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
#6

Updated by Benni Mack over 1 year ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF