Unit/System Tests Language Change PR-6.1-dev Pending

User tests: Successful: Unsuccessful:

avatar tecpromotion
tecpromotion
5 Jan 2026

Summary of Changes

This PR removes the authentication code {CODE} from the email subject line.

What problem am I trying to solve?
The email subject line is significantly less protected than the content:
It's often displayed in plain text, for example, on smartphone lock screens, in email notifications, or previews.
This makes it much easier for others to see the subject line without opening the email (shared inbox, office, support).
Forwarding and auto-replies also pose a problem; some systems only use the subject line and reply with it again, unintentionally including the code in other emails.

Testing Instructions

Activate the MFA plugin "Multi-factor Authentication - Authentication Code by Email" and configure it for a user.
Use this login method for the user. An email will arrive in the inbox.

Actual result BEFORE applying this Pull Request

Subject e.g.: "Your 610-alpha2 authentication code is -123456-"

Expected result AFTER applying this Pull Request

Subject e.g.: "Your 610-alpha2 authentication code"
And the code is now only contained in the email body.

Link to documentations

Please select:

  • Documentation link for docs.joomla.org:

  • No documentation changes for docs.joomla.org needed

  • Pull Request link for manual.joomla.org:

  • No documentation changes for manual.joomla.org needed

avatar tecpromotion tecpromotion - open - 5 Jan 2026
avatar tecpromotion tecpromotion - change - 5 Jan 2026
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 5 Jan 2026
Category Administration Language & Strings
avatar tecpromotion tecpromotion - change - 5 Jan 2026
Labels Added: Language Change PR-6.1-dev
avatar joomla-cms-bot joomla-cms-bot - change - 5 Jan 2026
Category Administration Language & Strings Administration Language & Strings JavaScript Unit Tests
avatar Fedik
Fedik - comment - 7 Jan 2026

Having the code in the subject allows to read the code without opening email. That actually is very useful on mobile.

I would suggest:

  • OR change authentication to auth to make it shorter :)
  • OR even better. Move the code up front: 123456 is your FoobarSiteName authentication code
avatar tecpromotion tecpromotion - change - 7 Jan 2026
Status Pending Closed
Closed_Date 0000-00-00 00:00:00 2026-01-07 13:42:28
Closed_By tecpromotion
Labels Added: Unit/System Tests
avatar tecpromotion tecpromotion - close - 7 Jan 2026

Add a Comment

Login with GitHub to post a comment