Breaking: #21638 - AbstractUserAuthentication::lockIP property removed

See forge#21638


The IP-locking-functionality is extended from IPv4 only to now also support IPv6. A separate IpLocker-functionality was added.

The public property lockIP in TYPO3\CMS\Core\Authentication\AbstractUserAuthentication is now removed. It usually shouldn't have been accessed directly and supported IPv4 only.


Extensions relying on lockIP won't be able to perform their task anymore. This might for example be the case when lockIP was set dynamically, depending on the REMOTE_ADDR.

Affected Installations

Every 3rd party extension depending on the formerly public lockIP property is affected.


Set lockIP and lockIPv6 in TYPO3_CONF_VARS - for FE or BE depending on the use case. Use the new \TYPO3\CMS\Core\Authentication\IpLocker API.