-
Bug
-
Resolution: Won't Fix
-
Minor
-
3.0.7-PL1
In case the tickmark "Log me on automatically each visit" is ticked, <board url>/adm will bring you to the ACP login screen.
In case the tickmark is not set, it will not allow you to the ACP login screen and will even log you out, because it requires the SID. Log out will even occur using <board url>/adm when you are in the ACP.
Is it a security issue to only direct to the ACP login screen with the SID attached? Should it work the same in case the tickmark is set for log me on automatically?
- is duplicated by
-
PHPBB-9446 Login credentials wiped out when attempting to log into ACP for the first time.
- Closed
- is related to
-
PHPBB-10913 Admin is logged out when accessing any url under adm/ without session id
- Closed