-
Bug
-
Resolution: Fixed
-
Major
-
3.0.10
-
None
Since this could be triggered by accident or even intentionally by a third party through e.g. an [img] tag in a post, it's rather annoying for an admin that he gets logged out when going to any URL under adm/ without a session id.
Instead such URLs should simply return a 401 Not Authorized header and redirect to the board index.
- caused
-
PHPBB-11196 /includes/session.php sends 401 HTTP status with "Not authorized" instead of "Unauthorized"
- Closed
- is related to
-
PHPBB-9156 Direct link to ACP login allowed
- Closed