Feeling Lucky
?
[#11869] - User can login at back-end if the password is wrong.
- Closed
- 3 Jun 2017
- Medium
- Build: master
- # 11869
Steps to reproduce the issue
- Do not give write permission to log file.
- Trying to login at the back-end using wrong password and correct username.
- There will be error message that, Cannot write to log file.
- At the top right corner, you can see user is logged-in in the site, which is not correct, because the password is wrong.
Expected result
User can not access site with wrong password and stay at the login page.
Actual result
Use can login with wrong password.
System information (as much as possible)
Additional comments
bhavikTailored
- 
bertmert
- comment
- 1 Sep 2016
One could add a cosmetical
<?php if (!empty($user->id)) : ?>
<ul class="nav nav-user<?php echo ($this->direction == 'rtl') ? ' pull-left' : ' pull-right'; ?>">
....
</ul>
<?php endif; ?>
in templates/isis/error.php line 162.
brianteeman
- comment
- 1 Sep 2016
This is a bug and needs fixing. The behaviour should be the same as if the logs file is writeable .
Thanks for reporting it
| Status | New | ⇒ | Confirmed |
GeraintEdwards
- comment
- 3 Jun 2017
I am looking at this as Bug Team at JAB
| Status | Confirmed | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2017-06-03 14:11:21 |
| Closed_By | ⇒ | franz-wohlkoenig |
| Status | Closed | ⇒ | Confirmed |
| Status | Confirmed | ⇒ | Closed |
| Closed_By | franz-wohlkoenig | ⇒ | joomla-cms-bot |
joomla-cms-bot
- comment
- 3 Jun 2017
Set to "closed" on behalf of @franz-wohlkoenig by The JTracker Application at issues.joomla.org/joomla-cms/11869
franz-wohlkoenig
- comment
- 3 Jun 2017
closed as having PR #16475
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/11869.
I can confirm this. But this seems to be the normal Errorpage from Joomla! for these cases and it is confusing. But no User is really logged in and any action will bring back to the Loginpage.