[TYPO3-english] Firebug and backend login 4.5

[Richard Davies]

Hi all,

Whenever I try to log in the backend of any of our sites (ranging from
4.4.12, 4.5.7, 4.5.8... 4.5.11) when firebug is enabled (if I disable it
for the current site - which I only just thought of - the login goes
through okay), I'm not getting in and instead get a 200 OK response.
However, if I disable firebug I can log in okay and get the 303 response.
I've looked quickly and can't see the login code failing anywhere, however
I know firebug sometimes fails on errors silently and doesn't report them
then crashes the code. Its not a huge thing but I'd like to be able to log
in without disabling firebug for the site. It started happening about three
weeks ago.

I also get the same issue when attempting to log in with fe_login with
saltedpasswords and rsaauth enabled.
Backend loginSecurityLevel isn't set to anything.
Latest firefox - 10.0.1, firebug 1.9.1.
The request headers are below.

REQUEST WITHOUT FIREBUG

http://{url}/typo3/index.php

POST /typo3/index.php HTTP/1.1
Host: {url}
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.1) Gecko/20100101
Firefox/10.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-gb,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://{url}/typo3/index.php
Cookie: PHPSESSID=18c53790b27dcfc0c3e7fa7e41919bb8;
typo3-login-cookiecheck=true;
fe_typo_user=d60b51330ea83c1ddd932ac478fee91b;
be_typo_user=52c1a20070c33b3abc70364b4ec82a20
Content-Type: application/x-www-form-urlencoded
Content-Length: 201
challenge={challenge}&login_status=login&userident={userident}&redirect_url=backend.php&loginRefresh=&interface=backend&username={username}&p_field=&commandLI=Login

HTTP/1.1 303 See Other
Date: Thu, 16 Feb 2012 22:45:33 GMT
Server:
X-Powered-By:
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Thu, 16 Feb 2012 22:45:34 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0,
pre-check=0
Pragma: no-cache
Set-Cookie: be_typo_user=fe06e3bbb52d08358a16f263d4e6df7f; path=/
Location: http://{url}/typo3/backend.php
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=windows-1252

REQUEST WITH FIREBUG

http://{url}/typo3/index.php

POST /typo3/index.php HTTP/1.1
Host: {url}
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.1) Gecko/20100101
Firefox/10.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-gb,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://{url}/typo3/index.php
Cookie: PHPSESSID=18c53790b27dcfc0c3e7fa7e41919bb8;
fe_typo_user=e4d972704957effe73709f558984ef88;
typo3-login-cookiecheck=true; be_typo_user=a0e9d78516e24c6259b70970d1e9047b
Content-Type: application/x-www-form-urlencoded
Content-Length: 183
challenge={challenge - different from
prev}&login_status=login&userident={userident - diff from
prev}&redirect_url=backend.php&loginRefresh=&username={username}&p_field=&commandLI=Login

HTTP/1.1 200 OK
Date: Thu, 16 Feb 2012 22:46:58 GMT
Server:
X-Powered-By:
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Thu, 16 Feb 2012 22:46:59 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0,
pre-check=0
Pragma: no-cache
Set-Cookie: be_typo_user=97f150edac28bb0c7cd4dc01de1927d2; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3850
Keep-Alive: timeout=15, max=85
Connection: Keep-Alive
Content-Type: text/html;charset=utf-8


Thanks
Richard