Actions
Bug #97340
closed
Parameter ?logintype=login&pass=password1234&pid=398&user=myuser doesnt work anymore
Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Authentication
Target version:
-
Start date:
2022-04-08
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
10
PHP Version:
7.4
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
Hello everyone,
in TYPO3 9 we could login an fe user by parameters in a url like "https://domain.com?logintype=login&pass=password1234&pid=398&user=myuser". In TYPO3 10 we get a warning:
component="TYPO3.CMS.Core.Authentication.AuthenticationService": Login-attempt from 2001:16b8:68ad:a500:38b1:dcba:4ac8:eb52, for username '' with an empty password!
So username seem so be empty, as well as password.
I have searched through all changelogs of TYPO3 10 and 9, but did not find any security or breaking changes. Is there another way to login as fe user by url? Or die some parameters changed?
Updated by
Actions