kirby-locked-pages icon indicating copy to clipboard operation
kirby-locked-pages copied to clipboard

Published 20 hours ago • verified publisher icon johannschopplich

Cookie remains valid after password change

Open gbdesign2023 opened this issue 10 months ago • 1 comments

If I subsequently change the password in the panel, I remain logged in. This makes it impossible to lock out users or use a password that changes frequently.

  • Locked Pages 2.1.3
  • Kirby 4.2

The password is also saved in plain text, which poses a security risk. The plug-in should therefore not be used to protect sensitive content. This should be indicated in the description.

gbdesign2023 avatar Apr 23 '24 06:04 gbdesign2023

For sure! Great ideas. I maintain this plugin, although I don't implement new features anymore, since my frontend development workflow has changed.

So PR for features is welcome!

johannschopplich avatar Apr 23 '24 06:04 johannschopplich