[TYPO3-dev] WARNING!?? tslib_patcher, pp_chashchecker

[Elmar Hinz]

Hi,


> That's why i did make this extension, wich fix a possible security
>> > problem, and ensure me that all my links are good (in combinaison with
>> > pageNotFoundOnCHashError)
>>
>> That setting definitely has a bug. If you set pageNotFoundOnCHashError it
>> redirects if the cHash is missing.
> 
> 
> No, of course no. Only if the cHash is wrong or 

This:

> if no cHash is set and a 
> plugin calls "TSFE->reqCHash".

is an everyday situation, as soon as a USER and a USER_INT are combined in
the same page. So of course yes, it is a bug.

Regards

Elmar