Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 UTC on 18 March 2024, to get $100 off your ticket.
- Log in or register to create an issue
- Advanced search
Title | Status | Priority | Category | Version | Component | Replies | Last updated | Assigned to | Created |
---|---|---|---|---|---|---|---|---|---|
use of less secure method unserialize() | Needs review | Normal | Bug report | 2.0.1 | Code | 2 | 3 months 1 week | 3 months 1 week | |
module downgrades drupal core | Active | Normal | Bug report | 2.0.1 | Code | 1 | 4 months 1 week | Dirk Bosman | 4 months 1 week |
All logins blocked | Active | Normal | Bug report | 7.x-1.9 | Code | 1 | 10 months 3 weeks | 10 months 3 weeks | |
Correctly detect invalid username/password or blocked account login errors | Closed (fixed) | Major | Bug report | 2.x-dev | Code | 42 | 11 months 3 weeks | Grevil | 1 year 8 months |
Suspicious activity in login form submissions is no longer detected | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 16 | 1 year 2 months | Grevil | 3 years 6 months |
Wrong Message if User doesn't exist in the system | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 22 | 1 year 2 months | Grevil | 4 years 11 months |
Query condition 'users_field_data.name IN ()' cannot be empty. | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 11 | 1 year 2 months | 3 years 9 months | |
Blocked user email produces error with Symfony Mailer | Closed (fixed) | Normal | Bug report | 2.0.0 | Code | 14 | 1 year 2 months | 1 year 6 months | |
Adjust tests, so they don't fail anymore | Closed (fixed) | Major | Bug report | 2.x-dev | Code | 9 | 1 year 2 months | Grevil | 1 year 2 months |
Fix deprecated help page | Needs review | Normal | Bug report | 2.x-dev | Code | 30 | 1 year 2 months | 1 year 3 months | |
Failing multiple login attempts will lead to a deprecation notice | Closed (duplicate) | Normal | Bug report | 2.x-dev | Code | 5 | 1 year 2 months | 1 year 3 months | |
Blocked user email should be skipped when the 'To' field is empty. | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 8 | 1 year 2 months | 1 year 3 months | |
Configuration strings are not translatable | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 17 | 1 year 2 months | 4 years 9 months | |
Validate function triggers PHP errors | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 11 | 1 year 2 months | 1 year 5 months | |
Typo in the token area | Closed (fixed) | Minor | Bug report | 2.x-dev | Code | 7 | 1 year 2 months | 1 year 3 months | |
Check and fix tests | Closed (duplicate) | Major | Bug report | 2.x-dev | Code | 3 | 1 year 2 months | Grevil | 1 year 3 months |
Blocked user by uid message doesn't appear. | Active | Normal | Bug report | 2.x-dev | User interface | 3 | 1 year 3 months | 4 years 1 month | |
Remove unnecessary db querys in translations. | Closed (won't fix) | Major | Bug report | 6.x-1.x-dev | Code | 4 | 1 year 3 months | 11 years 3 weeks | |
Message shown seems confusing when a user is blocked. | Closed (won't fix) | Major | Bug report | 8.x-1.x-dev | Code | 4 | 1 year 3 months | 7 years 8 months | |
Compatibility between TFA and Login Security | Closed (duplicate) | Major | Bug report | 2.0.0 | Code | 6 | 2 years 11 months | 3 years 2 months | |
Slightly change the core_version_requirement for 2.0.0 | Closed (won't fix) | Normal | Bug report | 2.x-dev | Code | 3 | 3 years 4 months | 3 years 4 months | |
Remove duplicate user_blocked_email_subject keys | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 5 | 3 years 5 months | 3 years 10 months | |
WSOD on login failure? | Closed (cannot reproduce) | Normal | Bug report | 2.x-dev | Code | 3 | 3 years 5 months | 3 years 5 months | |
Validation function does not properly escape inputs when using preg_grep | Needs review | Normal | Bug report | 7.x-1.x-dev | Code | 2 | 3 years 9 months | 3 years 9 months | |
Banning hosts doesnt work? | Active | Normal | Bug report | 7.x-1.4 | Code | 4 | 4 years 3 weeks | 10 years 8 months | |
Cannot unblock user | Closed (cannot reproduce) | Major | Bug report | 7.x-1.9 | User interface | 2 | 5 years 4 months | 6 years 6 months | |
Use User::getAccountName() instead of User::getDisplayName() | Closed (fixed) | Critical | Bug report | 8.x-1.x-dev | Code | 6 | 5 years 8 months | 5 years 9 months | |
Integration with the Nagios module shoundn't work | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 3 | 5 years 10 months | 5 years 11 months | |
WSOD / Unknown column 'mail' login_security_validate() line 168 | Closed (fixed) | Major | Bug report | 8.x-1.x-dev | Code | 4 | 5 years 10 months | 6 years 3 weeks | |
Edit notification texts - wrong placeholders | Needs review | Normal | Bug report | 7.x-1.x-dev | User interface | 5 | 6 years 1 month | salvis | 10 years 6 months |
Unknown modifier 'a' in login_security_validate() | Closed (outdated) | Normal | Bug report | 7.x-1.9 | Code | 4 | 6 years 1 month | WiseMike | 6 years 3 months |
Logic error: if (!count($password_message) || !count($block_message)) is always TRUE | Closed (outdated) | Normal | Bug report | 7.x-1.9 | Code | 3 | 6 years 1 month | 6 years 7 months | |
Fix the login failure error message detection | Needs review | Major | Bug report | 7.x-1.x-dev | Code | 2 | 6 years 1 month | salvis | 6 years 1 month |
PDOException: Serialization failure Deadlock for DELETE FROM {login_security_track} | Needs review | Normal | Bug report | 7.x-1.x-dev | Code | 3 | 6 years 3 months | 6 years 4 months | |
Disable login failure error message is not working | Closed (fixed) | Major | Bug report | 7.x-1.9 | Code | 19 | 6 years 6 months | 10 years 6 months | |
Coding standards | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 7 | 6 years 6 months | 6 years 9 months | |
Readme improvements | Closed (fixed) | Minor | Bug report | 8.x-1.x-dev | Documentation | 7 | 6 years 6 months | 6 years 10 months | |
Replace deprecated method getUsername() with getDisplayName() | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 7 | 6 years 6 months | 6 years 9 months | |
Track username or email user inputs. | Needs work | Normal | Bug report | 7.x-1.x-dev | Code | 6 | 6 years 8 months | 12 years 1 month | |
You have used 0 out of 5 attempts. Count is always in "0" | Closed (duplicate) | Normal | Bug report | 7.x-1.9 | Code | 8 | 6 years 8 months | 9 years 9 months | |
db_select is removed from D8 | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 5 | 7 years 4 months | chaitanya17 | 7 years 6 months |
format_date parameter should be "long", not "large" | Closed (fixed) | Major | Bug report | 8.x-1.x-dev | Code | 6 | 7 years 4 months | 7 years 5 months | |
Need to use $base_url | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 15 | 7 years 7 months | jalpesh | 7 years 8 months |
Translated strings are not used | Closed (cannot reproduce) | Normal | Bug report | 7.x-1.7 | Code | 3 | 7 years 8 months | 10 years 6 months | |
Risk of account lockout attack when used with the username enumeration prevention module | Active | Normal | Bug report | 7.x-1.9 | Code | 1 | 8 years 3 months | 8 years 3 months | |
Fix !placeholders | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 11 | 8 years 4 months | 8 years 4 months | |
Test failing because "Sorry" in the error message was removed from core | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 6 | 8 years 4 months | 8 years 5 months | |
Neither messages nor blocking work | Active | Normal | Bug report | 7.x-1.9 | Code | 5 | 8 years 4 months | 8 years 7 months | |
Fix config schema error: login_security.settings:langcode missing schema | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 8 | 8 years 5 months | 8 years 6 months | |
clear event tracking information button is broken | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 10 | 8 years 6 months | 8 years 9 months |