Skip to content
Snippets Groups Projects
Commit 8ebffad3 authored by Torben Hansen's avatar Torben Hansen Committed by Benni Mack
Browse files

[!!!][TASK] Remove admin user account check in ext:reports

In the early versions of TYPO3, "admin" and "password" were set as
the default login credentials. However, this practice was
discontinued long time ago, and the TYPO3 installation process has
since been updated to require users to set their own admin username
and password during installation.

Despite this change, a system report check for the "admin/password"
credentials remained in place. This check was originally intended
to ensure security by notifying administrators if these weak default
credentials were still being used. However, given that TYPO3 has not
used these default credentials for many versions now, this check has
become more or less useless, since it only covers one particular
scenario with weak user credentials.

Furthermore, with the introduction of default password policies in
TYPO3 version 12, the likelihood of users being able to set weak
passwords like "password" has been significantly reduced.

With this change, the check for legacy default login credentials
has been removed.

Resolves: #102686
Releases: main
Change-Id: I95bf3518340d8cc9ad0e216ad1c72aa9f98ff80d
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/82195


Tested-by: default avatarBenni Mack <benni@typo3.org>
Tested-by: default avatarOliver Klee <typo3-coding@oliverklee.de>
Reviewed-by: default avatarBenni Mack <benni@typo3.org>
Reviewed-by: default avatarOliver Klee <typo3-coding@oliverklee.de>
Tested-by: default avatarcore-ci <typo3@b13.com>
parent 976f67ea
Branches
Tags
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment