Forgot Manager Login 1.1.6-pl
Released Jan 08, 2013 by opengeekThe Forgot Manager Login plugin bundled with MODX Evolution.
This is made available in Extras for security patches and updates that may be available for the plugin before a MODX Evolution release is made available.
Download 8kb (1541 downloads)Resets your manager login when you forget your password via email confirmation.
This patch release prevents an array passed into the hash variable from allowing an attacker to launch additional attacks on an Evolution install.
Installation Instructions
Copy and paste the contents of the plugin.ForgotManagerPassword.txt file into the Forgot Manager Login plugin in your MODX Evolution install. If this plugin does not exist in your installation, create a new plugin with this name, add this code, and register it on the following events:
- OnBeforeManagerLogin
- OnManagerAuthentication
- OnManagerLoginFormRender
- [#9391] Prevent hash array exploits