TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:09 +02:00
commit af8cc155b5
6818 changed files with 642608 additions and 0 deletions
@@ -0,0 +1,40 @@
+.. include:: /Includes.rst.txt
+
+.. _deprecation-94309:
+
+=================================================
+Deprecation: #94309 - GeneralUtility::stdAuthCode
+=================================================
+
+See :issue:`94309`
+
+Description
+===========
+
+The method :php:`\TYPO3\CMS\Core\Utility\GeneralUtility::stdAuthCode()`
+has not been used within the Core since at least v9. It internally fiddles
+with the `encryptionKey` while using :php:`md5()`. Furthermore, the default
+length of 8 chars could easily lead to hash collisions. The TYPO3 Core already
+provides :php:`\TYPO3\CMS\Core\Utility\GeneralUtility::hmac()` for such
+purposes, which is using `sha1` with a length of 40. Therefore,
+:php:`stdAuthCode()` has been deprecated and will be removed in TYPO3 v12.
+
+Impact
+======
+
+Calling the method will trigger a PHP :php:`E_USER_DEPRECATED` error.
+
+Affected Installations
+======================
+
+All TYPO3 installations calling this method in custom code. The extension
+scanner will find all usages as strong match.
+
+Migration
+=========
+
+Replace all usages of the method in custom extension code by either using
+:php:`\TYPO3\CMS\Core\Utility\GeneralUtility::hmac()` or by a custom
+implementation.
+
+.. index:: PHP-API, FullyScanned, ext:core