[!!!][TASK] Remove admin user account check in ext:reports
In the early versions of TYPO3, "admin" and "password" were set as the default login credentials. However, this practice was discontinued long time ago, and the TYPO3 installation process has since been updated to require users to set their own admin username and password during installation. Despite this change, a system report check for the "admin/password" credentials remained in place. This check was originally intended to ensure security by notifying administrators if these weak default credentials were still being used. However, given that TYPO3 has not used these default credentials for many versions now, this check has become more or less useless, since it only covers one particular scenario with weak user credentials. Furthermore, with the introduction of default password policies in TYPO3 version 12, the likelihood of users being able to set weak passwords like "password" has been significantly reduced. With this change, the check for legacy default login credentials has been removed. Resolves: #102686 Releases: main Change-Id: I95bf3518340d8cc9ad0e216ad1c72aa9f98ff80d Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/82195 Tested-by:Benni Mack <benni@typo3.org> Tested-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Tested-by:
core-ci <typo3@b13.com>
Showing
- typo3/sysext/core/Resources/Private/Language/locallang_core.xlf 0 additions, 3 deletions...sysext/core/Resources/Private/Language/locallang_core.xlf
- typo3/sysext/reports/Classes/Report/Status/SecurityStatus.php 0 additions, 63 deletions...3/sysext/reports/Classes/Report/Status/SecurityStatus.php
- typo3/sysext/reports/Resources/Private/Language/locallang_reports.xlf 0 additions, 3 deletions.../reports/Resources/Private/Language/locallang_reports.xlf
Please register or sign in to comment