Additional requirements :
- Development mode enabled

This is a tool I have been using because I find it annoying to have to login to the Admin CP repeatedly on my local installations. As per the title, this add-on will allow you to be automatically signed in to the admin control panel under configured conditions.

Never run this in production. This add-on signs you into the Admin control panel without a password. Use it only on a local, single-user development install. Do not enable it on any server others can reach, or on any install holding real member data.

Features​

• Automatically signs you in to your admin control panel, completely bypassing the login panel.
• Multiple security requirements are enforced for this to run properly:
  • Development mode is a requirement. $config['development']['enabled'] = true;
  • Our specific config flag must also be enabled. $config['mcBypassAdminLogin'] = true;
  • Your username must be added to the allowed admins list.
  • Your IP Address must be configured, unless you explicitly allow any source.
• Optionally enable denied login attempts logging. This is useful if you choose to use this on a live private and directory locked development installation. It also helps diagnose any failed login attempts due to any IP address issues.
  • Includes optional email alerts as well.

IP address tips:

• 127.0.0.1 and ::1 are default to include local IP's for local installs.
• IPv6 addresses should include it's /64 prefix since v6 addresses can rotate on a daily bases:
  • Example: 2600:1700:28e0:45a0:dc65:ed44:5c30:2d37 to 2600:1700:28e0:45a0::/64
• To allow any source, you must EXPLICITLY type in 0.0.0.0/0 and ::/0

Télécharger V1.0.0 :

Version 1.0.1 : Have released a new maintenance update with improvements and bug fixes

Improvements

• Save-time validation for all options: IP allowlist entries must be valid IP/CIDR ranges, allowed admins must exist and hold admin status, and the alert email must be valid
• Disarm now revokes live bypass sessions; the first Admin CP request after removing the config flag (or disabling development mode) logs the bypassed session out. Password-login sessions are unaffected
• "Granted from new IP" alert email when a bypass succeeds from an IP not seen in the last 30 days

Bug fixes

• Denial throttle entries no longer accumulate in the registry (one per denied IP). Now self prunes with a hard cap. Upgrade cleans up throttle keys.
• Visiting the admin cp login without a front-end login was logged as a denied bypass attempt. Now fails silently
• Usernames with non-ASCII characters could fail the allowed-admins match due to byte-wise case folding; matching is now multi-byte aware
• Logout redirect no longer assumes reply type and now shares the same arming check as the listener

Télécharger V1.0.1 :