Bug #90335
closedLogin Failure Warning email doesn’t show IP addresses
100%
Description
Since TYPO3 9.5 the login failure warning email doesn’t contains IP addresses anymore. Instead there is a marker ###IP###.
This is a dump of the failures: 05-02-20 17:52: Login-attempt from ###IP###, username 'johndoe' not found!! 05-02-20 18:01: Login-attempt from ###IP###, username 'janedoe', password not accepted! 05-02-20 18:01: Login-attempt from ###IP###, username 'janedoe', password not accepted! 05-02-20 18:02: Login-attempt from ###IP###, username 'johndoe' not found!!
Is it some kind of anonymization ?
I checked the function BackendUserAuthentication::checkLogFailures() and it uses the raw log_data from sys_log without replacing this marker.
Updated by Gerrit Code Review about 4 years ago
- Status changed from Accepted to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63249
Updated by Gerrit Code Review about 4 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63249
Updated by Gerrit Code Review about 4 years ago
Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63229
Updated by Georg Ringer about 4 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 7561ec954c5cfb9ed65271fac784ca09d9c0c542.