Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Follow up on the LoginAttemptNotifications extension #41

Open
robbieaverill opened this issue Jul 25, 2018 · 0 comments
Open

Follow up on the LoginAttemptNotifications extension #41

robbieaverill opened this issue Jul 25, 2018 · 0 comments

Comments

@robbieaverill
Copy link
Contributor

robbieaverill commented Jul 25, 2018

CWP 2.1, probably CWP 2.0 as well

The LoginAttemptNotifications extensions purpose is to show the CMS user when they log in the number of successful and/or unsuccessful login attempts that occurred since the previous time they logged into the CMS.

@chillu pointed out that it's not particularly useful to show CMS users that there were successful login attempts, seeing as the message looks like this (nobody will remember their IP and be able to distinguish a malicious login from it):

In the last 2 mins a successful login attempt to your account was registered. The attempt was made from 14.1.35.58.

In CWP 1.x this extension was disabled in 2013:

silverstripe/cwp@2c576c3#diff-8a7315557cd9f672e36f7e8f0ce2c29e

It was re-enabled during the CWP 2.x upgrade, possibly by mistake:

f46727f#diff-8a7315557cd9f672e36f7e8f0ce2c29eR125

It was then moved from _config.php into a YAML config file.


This issue is raised as a placeholder to either deprecated and remove this feature OR to investigate, fix and reimplement it so that it works correctly and doesn't show up every time a CMS user does something in the CMS.

Context: CWP kitchen sink recipe 2.1.x-dev on the CWP platform, not logged in as the default admin user.

Related bug fix for this functionality in core (UI fix): silverstripe/silverstripe-admin#568

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant