Deprecation: #94309 - GeneralUtility::stdAuthCode¶
See forge#94309
Description¶
The method \TYPO3\CMS\Core\Utility\GeneralUtility::stdAuthCode()
has not been used within the Core since at least v9. It internally fiddles
with the encryptionKey
while using md5()
. Furthermore, the default
length of 8 chars could easily lead to hash collisions. The TYPO3 Core already
provides \TYPO3\CMS\Core\Utility\GeneralUtility::hmac()
for such
purposes, which is using sha1
with a length of 40. Therefore,
stdAuthCode()
has been deprecated and will be removed in TYPO3 v12.
Impact¶
Calling the method will trigger a PHP E_USER_DEPRECATED
error.
Affected Installations¶
All TYPO3 installations calling this method in custom code. The extension scanner will find all usages as strong match.
Migration¶
Replace all usages of the method in custom extension code by either using
\TYPO3\CMS\Core\Utility\GeneralUtility::hmac()
or by a custom
implementation.