MyBB Community Forums

In the ACP, MyBB has this line of code to verify user credentials:

if($loginhandler->verify_username() !== false && $loginhandler->verify_password() !== false)

There are no plugin hooks here to manage a verified login.

I suggest updating and using validate_login in ./inc/datahandlers/login.php to provide a consistent format for user verification.

Agreed. Seems like a weird design decision IMO...

The acp login was always weird and should be completly changed (eg to allow plugin authors to add their own checks). But yes, the login handler should be used.

I agree, it needs to be changed.

Then push this into github or move these agreed threads into another forum -> many of them are missed or not pushed

Pushed to GitHub: https://github.com/mybb/mybb/issues/1757