Sven
Sven

Reputation: 802

realurl generates entries without cHash

I have a piBase extension which has a listing of records and a detail page. When calling the listing first, everything is fine, realurl (version 2.0.15, TYPO3 version 7.6.10) creates the urls for the detail pages with cHash parameter, e.g.

cHash=dc3409cee49ff80a6b8173357a474bd3&id=168&tx_myext_pi1[event]=1062

But when truncating all four realurl tables, clearing the frontend cache and accessing a detail page of a record directly, realurl creates the url for this page without cHash:

id=168&tx_myext_pi1[event]=1062

When trying the same in an Extbase extension (e.g. EXT:news) I get a 404 error and the generated url is also without cHash:

id=102&tx_news_pi1[news]=speaking-path-of-news

Why is the cHash parameter missing? Is this a bug?

Upvotes: 2

Views: 956

Answers (2)

Michael Gnessner
Michael Gnessner

Reputation: 149

In realurl 2.0.15 the cHash was disabled by security aspects. You can update to realurl 2.1.x

Upvotes: 0

User366
User366

Reputation: 796

Realurl <= 2.0.14 recalculated cHash if it was missing. Since 2.0.15 security team forced me to disable this feature. Missing cHash is an expected outcome of the security team's request. I made some efforts to mitigate the problem but it cannot be fully solved. Sorry.

Upvotes: 5

Related Questions