Merge remote-tracking branch 'origin/support/3.2' into develop

This commit is contained in:
jf-cbd
2026-03-20 16:32:59 +01:00

View File

@@ -116,6 +116,7 @@ if (is_array($aModuleDelegatedAuthenticationEndpointsList) && !in_array($sPage,
LoginWebPage::DoLoginEx();
}
if (is_null($aModuleDelegatedAuthenticationEndpointsList) && !UserRights::IsLoggedIn()) {
require_once(APPROOT.'/application/startup.inc.php');
// check if user is not logged in, if not log a warning in the log file as the page is executed without login, which is not recommended for security reason
IssueLog::Debug("The '$sPage' page is executed without logging in. This call will be blocked in the future and will likely cause unwanted behaviour in the '$sModule' module. Please define a delegated authentication endpoint for the module, as described at https://www.itophub.io/wiki/page?id=latest:customization:new_extension#security.");
}