[TYPO3-mvc] Realurl and hmac

[Sebastian Fischer]

On 06/08/2011 07:33 AM, Sebastian Fischer wrote:
> Hi everyone,
>
> i tried to configure realurl for controller and action in use with a
> form. But everything i get is:
>
> #1255082824: Request hash (HMAC) checking failed. The parameter __hmac
> was invalid or not set, and objects were modified.
>
> Whenever i remove the setting and the parameters are present in the url
> als get parameters everything works fine. As soon as i activate the
> rewriting i get that error after sending the form.
>
> What is the problem there and how can i fix it?
>
> Greetings
> Sebastian

Found the problem.

If the configuration for realurl contains something like

'feuser' => array(
	array(
		'GETvar' => 'controller',
	),
	array(
		'GETvar' => 'action',
	),
	array(
		'GETvar' => 'mailhash',
		'noMatch' => 'bypass',
	),
),

the mailhash parameter is filled on decoding even if its empty. And by 
that a parameter not present in hmac is inserted. Which is evil ;)


I hope changing to noMatch => null will fix this.

Greetings
Sebastian