Project

General

Profile

Feature #3677

Updated by Carsten Rose over 4 years ago

To forward FE_USER privileges to wkhtmltopdf, it's necessary to switch off the IP check for FE_USER ($TYPO3_CONF_VARS[FE][lockIP]). This lowers the security level - it would be good not to do that. 

 Extension for user specific `$TYPO3_CONF_VARS[FE][lockIP]` https://www.typo3.net/forum/thematik/zeige/thema/61123/ 
 * This might help to offfer    `$TYPO3_CONF_VARS[FE][lockIP]` together with an IP whitelist (=localhost). 
 * The idea is to develop a separate Extension or to integrate that feature in QFQ. 


 Some notes: 
 * http://typo3blog.at/blog/artikel/typo3-ausreichend-absichern/ 
 * https://docs.typo3.org/typo3cms/SecurityGuide/GuidelinesIntegrators/GlobalTypo3Options/Index.html 

Back