Bug #95132
closed
felogin forgot password with email address - the felogin_forgotHash will be set for all fe_users with the same eMail address
100%
Description
The felogin_forgotHash will be set for all fe_users with the same eMail address, and the new password then too.
In updateForgotHashForUserByEmail() the "where" only contains the email address as field.
Updated by Oliver Hader over 2 years ago
- Status changed from New to Accepted
Process should consider and use a particular identifier of the entity that shall be handled - as a result the (signed) uid needs to be part of a recovery link and token.
Updated by Tobias Kapplmüller almost 2 years ago
Are there any news on this? From what I can see on GitHub (https://github.com/TYPO3/typo3/blob/v11.5.9/typo3/sysext/felogin/Classes/Domain/Repository/FrontendUserRepository.php) that bug appears to affetct TYPO3 v11 as well.
Updated by Torben Hansen almost 2 years ago
- Related to Bug #97784: Password Recovery does not work because FrontendUserRepository does not respect storage pages added
Updated by Gerrit Code Review almost 2 years ago
- Status changed from Accepted to Under Review
Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 2 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 3 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 4 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 5 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 6 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 7 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 8 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Anja Leichsenring over 1 year ago
- Related to Task #98286: ExtensionScanner Matcher for added arguments in interface methods. added
Updated by Anja Leichsenring over 1 year ago
- Related to deleted (Task #98286: ExtensionScanner Matcher for added arguments in interface methods.)
Updated by Gerrit Code Review over 1 year ago
Patch set 9 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 10 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 11 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Gerrit Code Review over 1 year ago
Patch set 12 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/75274
Updated by Torben Hansen over 1 year ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 89182fa08adb2c75b063dfd8a2745c693c4393a8.
Updated by
Updated by Oliver Hader 7 months ago
- Related to Bug #99902: "Login Form" -> "Display Password Recovery Link" does not respect "User Storage Page" added