Quantcast
Channel: Joomla! Forum - community, help and support
Viewing all articles
Browse latest Browse all 1913

Security in Joomla! 5.x • Registered Users unable to receive emailed MFA confirmation code

$
0
0
My site ccorch.org was built using Joomla 4 and is now upgraded to Joomla 5. User accounts are established only by an administrator and MFA is enabled. Everything was working fine until recently it stopped sending 6-digit MFA confirmation codes to registered users.

Now any attempt to login to front or back end results in the message "Could not instantiate mail function" being displayed somewhere on the login page. The user will then receive an email telling him that he is logged in but he will not receive the necessary 6-digit confirmation code necessary to enter the site.

I have tried changing the global settings for email on the site from php to smtp and also to sendmail. Any of the email states will successfully send a confirmation that email is working but none will send the necessary 6-digit code.

FPA content:
[27-Jan-2024 14:50:03 UTC] PHP Deprecated: strtotime(): Passing null to parameter #1 ($datetime) of type string is deprecated in /home/ccorch/public_html/administrator/components/com_users/src/Model/CaptiveModel.php on line 429
Joomla! Instance :: Joomla! 5.0.2-Stable (Kuboresha) 9-January-2024
Joomla! Configured :: Yes | Read-Only (444) |
Configuration Options :: Offline: false | SEF: true | SEF Suffix: false | SEF ReWrite: false | .htaccess/web.config: Yes | GZip: false | Cache: false | CacheTime: 15 | CacheHandler: file | CachePlatformPrefix: false | FTP Layer: N/A | Proxy: false | LiveSite: | Session lifetime: 60 | Session handler: database | Shared sessions: false | SSL: 2 | Error Reporting: default | Site Debug: false | Language Debug: false | Default Access: Public | Unicode Slugs: false | dbConnection Type: mysqli | PHP Supports J! 5.0.2: Yes | Database Supports J! 5.0.2: Yes | Database Credentials Present: Yes |

Host Configuration :: OS: Linux | OS Version: 3.10.0-1160.80.1.vz7.191.4 | Technology: x86_64 | Web Server: Apache | Encoding: gzip, deflate, br | System TMP Writable: Yes | Free Disk Space : 47.35 GiB |

PHP Configuration :: Version: 8.1.27 | PHP API: fpm-fcgi | Session Path Writable: Yes | Display Errors: 0 | Error Reporting: 32759 | Log Errors To: /home/ccorch/logs/ccorch_org.php.error.log | Last Known Error: 27th January 2024 14:50:03. | Register Globals: | Magic Quotes: | Safe Mode: | Allow url fopen: 1 | Open Base: | Uploads: 1 | Max. Upload Size: 28M | Max. POST Size: 28M | Max. Input Time: 60 | Max. Execution Time: 300 | Memory Limit: 512M

Database Configuration :: Version: 10.6.16-MariaDB (Client:mysqlnd 8.1.27) | Database Size: 9.00 MiB | #of Tables with config prefix:  127 | #of other Tables:  0 | User Privileges : GRANT ALL
PHP Extensions :: Core (8.1.27) | date (8.1.27) | libxml (8.1.27) | openssl (8.1.27) | pcre (8.1.27) | zlib (8.1.27) | filter (8.1.27) | hash (8.1.27) | json (8.1.27) | pcntl (8.1.27) | Reflection (8.1.27) | SPL (8.1.27) | session (8.1.27) | standard (8.1.27) | cgi-fcgi (8.1.27) | bcmath (8.1.27) | bz2 (8.1.27) | calendar (8.1.27) | ctype (8.1.27) | curl (8.1.27) | dba (8.1.27) | dom (20031129) | enchant (8.1.27) | mbstring (8.1.27) | fileinfo (8.1.27) | ftp (8.1.27) | gd (8.1.27) | gettext (8.1.27) | gmp (8.1.27) | iconv (8.1.27) | imap (8.1.27) | intl (8.1.27) | ldap (8.1.27) | exif (8.1.27) | mysqlnd (mysqlnd 8.1.27) | odbc (8.1.27) | PDO (8.1.27) | pgsql (8.1.27) | Phar (8.1.27) | posix (8.1.27) | pspell (8.1.27) | shmop (8.1.27) | SimpleXML (8.1.27) | snmp (8.1.27) | soap (8.1.27) | sockets (8.1.27) | sqlite3 (8.1.27) | sysvmsg (8.1.27) | sysvsem (8.1.27) | sysvshm (8.1.27) | tidy (8.1.27) | tokenizer (8.1.27) | xml (8.1.27) | xmlwriter (8.1.27) | xsl (8.1.27) | zip (1.19.5) | mysqli (8.1.27) | pdo_mysql (8.1.27) | PDO_ODBC (8.1.27) | pdo_pgsql (8.1.27) | pdo_sqlite (8.1.27) | xmlreader (8.1.27) | Zend Engine (4.1.27) |
Potential Missing Extensions ::
Disabled Functions :: exec | passthru | shell_exec | system |

Switch User Environment :: PHP CGI: Yes | Server SU: No | PHP SU: Yes | Potential Ownership Issues: No
Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (---) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) | administrator/logs/ (755) | api/ (755) |

Elevated Permissions (First 10) ::
Database statistics :: Uptime: 3624687 | Threads: 1 | Questions: 15894585 | Slow queries: 1 | Opens: 30719 | Open tables: 128 | Queries per second avg: 4.385 |
Components :: Site ::
Core ::
3rd Party:: WF_LINKS_JOOMLALINKS_TITLE (2.9.61) ? | WF_FILESYSTEM_JOOMLA_TITLE (2.9.61) ? | WF_POPUPS_JCEMEDIABOX_TITLE (2.9.61) ? | WF_LINK_SEARCH_TITLE (2.9.61) ? | WF_AGGREGATOR_DAILYMOTION_TITLE (2.9.61) ? | WF_AGGREGATOR_[[youtube]]_TITLE (2.9.61) ? | WF_AGGREGATOR_VIDEO_TITLE (2.9.61) ? | WF_AGGREGATOR_VIMEO_TITLE (2.9.61) ? | WF_AGGREGATOR_AUDIO_TITLE (2.9.61) ? | WF_CLEANUP_TITLE (2.9.61) ? | WF_SEARCHREPLACE_TITLE (2.9.61) ? | WF_ARTICLE_TITLE (2.9.61) ? | WF_ANCHOR_TITLE (2.9.61) ? | WF_KITCHENSINK_TITLE (2.9.61) ? | WF_NONBREAKING_TITLE (2.9.61) ? | WF_SOURCE_TITLE (2.9.61) ? | WF_PRINT_TITLE (2.9.61) ? | WF_WORDCOUNT_TITLE (2.9.61) ? | WF_AUTOSAVE_TITLE (2.9.61) ? | WF_PREVIEW_TITLE (2.9.61) ? | WF_VISUALCHARS_TITLE (2.9.61) ? | WF_FILEMANAGER_TITLE (2.9.61) ? | WF_MICRODATA_TITLE (2.9.61) ? | WF_SPELLCHECKER_TITLE (2.9.61) ? | WF_ATTRIBUTES_TITLE (2.9.61) ? | JCE - Columns (1.0.0) ? | WF_LINK_TITLE (2.9.61) ? | WF_CAPTION_TITLE (2.9.41) ? | WF_TEMPLATEMANAGER_TITLE (2.9.61) ? | WF_LANGCODE_TITLE (2.9.61) ? | WF_FONTCOLOR_TITLE (2.9.61) ? | WF_LISTS_TITLE (2.9.61) ? | WF_CLIPBOARD_TITLE (2.9.61) ? | WF_TEXTCASE_TITLE (2.9.61) ? | WF_FORMATSELECT_TITLE (2.9.61) ? | WF_TABLE_TITLE (2.9.61) ? | WF_MEDIA_TITLE (2.9.61) ? | WF_CHARMAP_TITLE (2.9.61) ? | WF_BROWSER_TITLE (2.9.61) ? | WF_REFERENCE_TITLE (2.9.61) ? | WF_HELP_TITLE (2.9.61) ? | WF_IMGMANAGER_EXT_TITLE (2.9.61) ? | WF_VISUALBLOCKS_TITLE (2.9.61) ? | WF_HR_TITLE (2.9.61) ? | WF_IFRAME_TITLE (2.9.61) ? | WF_STYLESELECT_TITLE (2.9.61) ? | WF_FONTSELECT_TITLE (2.9.61) ? | WF_TEXTPATTERN_TITLE (2.9.61) ? | WF_STYLE_TITLE (2.9.61) ? | WF_EMOTIONS_TITLE (2.9.61) ? | WF_IMGMANAGER_TITLE (2.9.61) ? | WF_FONTSIZESELECT_TITLE (2.9.61) ? | WF_MEDIAMANAGER_TITLE (2.9.61) ? | JCE - Noneditable (1.0.0) ? | WF_DIRECTIONALITY_TITLE (2.9.61) ? | WF_CONTEXTMENU_TITLE (2.9.61) ? | WF_FULLSCREEN_TITLE (2.9.61) ? |

Components :: Admin ::
Core :: com_config (4.0.0) 1 | com_installer (4.0.0) 1 | com_login (4.0.0) 1 | com_workflow (4.0.0) 1 | com_checkin (4.0.0) 1 | com_newsfeeds (4.0.0) 1 | com_cache (4.0.0) 1 | com_privacy (3.9.0) 1 | com_mails (4.0.0) 1 | com_cpanel (4.0.0) 1 | com_associations (4.0.0) 1 | com_fields (4.0.0) 1 | com_menus (4.0.0) 1 | com_media (3.0.0) 1 | com_admin (4.0.0) 1 | com_ajax (4.0.0) 1 | com_tags (4.0.0) 1 | com_finder (4.0.0) 1 | com_plugins (4.0.0) 1 | com_languages (4.0.0) 1 | com_wrapper (4.0.0) 1 | com_redirect (4.0.0) 1 | com_banners (4.0.0) 1 | com_categories (4.0.0) 1 | com_contenthistory (4.0.0) 1 | com_content (4.0.0) 1 | com_postinstall (4.0.0) 1 | com_guidedtours (4.3.0) 1 | com_modules (4.0.0) 1 | com_templates (4.0.0) 1 | com_actionlogs (3.9.0) 1 | com_joomlaupdate (4.0.3) 1 | com_scheduler (4.1.0) 1 | com_users (4.0.0) 1 | com_messages (4.0.0) 1 |
3rd Party:: com_iquix (1.7.0) 1 | JoomInsights (1.0.0) ? | JoomInsights (1.0.0) ? | com_quix (4.5.3) 1 | com_admintools (7.4.8) 1 | com_akeebabackup (9.8.5) 1 | SP Page Builder (5.2.5) 1 | COM_JCE (2.9.61) 1 | com_jmedia (##JMEDIA_VERS) 1 | COM_CUSTOMTABLES (3.2.4) 1 |

Modules :: Site ::
Core :: mod_tags_popular (3.1.0) 1 | mod_banners (3.0.0) 1 | mod_custom (3.0.0) 1 | mod_finder (3.0.0) 1 | mod_languages (3.5.0) 1 | mod_syndicate (3.0.0) 1 | mod_breadcrumbs (3.0.0) 1 | mod_related_items (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_articles_popular (3.0.0) 1 | mod_articles_latest (3.0.0) 1 | mod_articles_news (3.0.0) 1 | mod_users_latest (3.0.0) 1 | mod_footer (3.0.0) 1 | mod_feed (3.0.0) 1 | mod_articles_archive (3.0.0) 1 | mod_whosonline (3.0.0) 1 | mod_tags_similar (3.1.0) 1 | mod_random_image (3.0.0) 1 | mod_articles_category (3.0.0) 1 | mod_articles_categories (3.0.0) 1 | mod_login (3.0.0) 1 | mod_wrapper (3.0.0) 1 | mod_stats (3.0.0) 1 |
3rd Party:: Custom Tables - Catalog (3.2.4) 1 | SP Page Builder (5.2.5) 1 | mod_jmediagallery (1.0.0) 1 | mod_quix (4.5.3) 1 |

Modules :: Admin ::
Core :: mod_post_installation_messages (4.0.0) 1 | mod_sampledata (3.8.0) 1 | mod_logged (3.0.0) 1 | mod_user (4.0.0) 1 | mod_custom (3.0.0) 1 | mod_quickicon (3.0.0) 1 | mod_popular (3.0.0) 1 | mod_latestactions (3.9.0) 1 | mod_privacy_status (4.0.0) 1 | mod_loginsupport (4.0.0) 1 | mod_privacy_dashboard (3.9.0) 1 | mod_latest (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_guidedtours (4.3.0) 1 | mod_stats_admin (3.0.0) 1 | mod_submenu (3.0.0) 1 | mod_toolbar (3.0.0) 1 | mod_feed (3.0.0) 1 | mod_messages (4.0.0) 1 | mod_frontend (4.0.0) 1 | mod_version (3.0.0) 1 | mod_multilangstatus (3.0.0) 1 | mod_login (3.0.0) 1 | mod_title (3.0.0) 1 |
3rd Party:: mod_quix_menu (4.5.3) 1 | mod_jmediaicons (1.0.0) 1 | mod_quix_info (4.5.3) 1 |

Libraries ::
Core ::
3rd Party:: lib_jmedia (1.0.0) 1 |

Plugins ::
Core :: plg_system_languagefilter (3.0.0) 0 | plg_system_highlight (3.0.0) 1 | plg_system_actionlogs (3.9.0) 1 | plg_system_languagecode (3.0.0) 0 | plg_system_skipto (4.0.0) 1 | plg_system_privacyconsent (3.9.0) 0 | plg_system_stats (3.5.0) 1 | plg_system_schemaorg (5.0.0) 1 | plg_system_remember (3.0.0) 1 | plg_system_debug (3.0.0) 1 | plg_system_jooa11y (4.2.0) 1 | plg_system_guidedtours (4.3.0) 1 | plg_system_fields (3.7.0) 1 | plg_system_logout (3.0.0) 1 | plg_system_httpheaders (4.0.0) 1 | plg_system_sef (3.0.0) 1 | plg_system_accessibility (4.0.0) 0 | plg_system_redirect (3.0.0) 0 | plg_system_cache (3.0.0) 0 | plg_system_task_notification (4.1) 1 | plg_system_log (3.0.0) 1 | plg_system_schedulerunner (4.1) 1 | plg_system_webauthn (4.0.0) 1 | plg_system_shortcut (4.2.0) 1 | plg_content_finder (3.0.0) 1 | plg_content_vote (3.0.0) 0 | plg_content_confirmconsent (3.9.0) 0 | plg_content_joomla (3.0.0) 1 | plg_content_pagebreak (3.0.0) 1 | plg_content_pagenavigation (3.0.0) 1 | Content - SP Page Builder (5.2.5) 1 | plg_content_fields (3.7.0) 1 | plg_content_emailcloak (3.0.0) 1 | plg_content_loadmodule (3.0.0) 1 | plg_editors-xtd_article (3.0.0) 1 | plg_editors-xtd_readmore (3.0.0) 1 | plg_editors-xtd_module (3.5.0) 1 | plg_editors-xtd_pagebreak (3.0.0) 1 | plg_editors-xtd_fields (3.7.0) 1 | plg_editors-xtd_menu (3.7.0) 1 | plg_editors-xtd_image (3.0.0) 1 | plg_finder_content (3.0.0) 1 | plg_finder_newsfeeds (3.0.0) 1 | plg_finder_categories (3.0.0) 1 | plg_finder_contacts (3.0.0) 1 | plg_finder_tags (3.0.0) 1 | plg_privacy_content (3.9.0) 1 | plg_privacy_actionlogs (3.9.0) 1 | plg_privacy_user (3.9.0) 1 | plg_privacy_consents (3.9.0) 1 | plg_privacy_message (3.9.0) 1 | plg_webservices_languages (4.0.0) 1 | plg_webservices_content (4.0.0) 1 | plg_webservices_privacy (4.0.0) 1 | plg_webservices_modules (4.0.0) 1 | plg_webservices_banners (4.0.0) 1 | plg_webservices_menus (4.0.0) 1 | plg_webservices_newsfeeds (4.0.0) 1 | plg_webservices_installer (4.0.0) 1 | plg_webservices_config (4.0.0) 1 | plg_webservices_media (4.1.0) 1 | plg_webservices_users (4.0.0) 1 | plg_webservices_templates (4.0.0) 1 | plg_webservices_redirect (4.0.0) 1 | plg_webservices_plugins (4.0.0) 1 | plg_webservices_tags (4.0.0) 1 | plg_webservices_messages (4.0.0) 1 | plg_filesystem_local (4.0.0) 1 | plg_media-action_rotate (4.0.0) 1 | plg_media-action_crop (4.0.0) 1 | plg_media-action_resize (4.0.0) 1 | plg_schemaorg_blogposting (5.0.0) 1 | plg_schemaorg_book (5.0.0) 1 | plg_schemaorg_recipe (5.0.0) 1 | plg_schemaorg_event (5.0.0) 1 | plg_schemaorg_organization (5.0.0) 1 | plg_schemaorg_person (5.0.0) 1 | plg_schemaorg_jobposting (5.0.0) 1 | plg_sampledata_multilang (4.0.0) 1 | plg_user_token (3.9.0) 1 | plg_user_contactcreator (3.0.0) 0 | plg_user_profile (3.0.0) 0 | plg_user_joomla (3.0.0) 1 | plg_user_terms (3.9.0) 0 | plg_installer_packageinstaller (3.6.0) 1 | plg_installer_webinstaller (4.0.0) 1 | plg_installer_folderinstaller (3.6.0) 1 | plg_installer_urlinstaller (3.6.0) 1 | plg_installer_override (4.0.0) 1 | plg_extension_finder (4.0.0) 1 | plg_extension_joomla (3.0.0) 1 | plg_extension_namespacemap (4.0.0) 1 | plg_api-authentication_token (4.0.0) 1 | plg_api-authentication_basic (4.0.0) 0 | plg_task_deleteactionlogs (5.0.0) 1 | plg_task_check_files (4.1) 1 | plg_task_globalcheckin (5.0.0) 1 | plg_task_sessiongc (5.0.0) 1 | plg_task_site_status (4.1) 1 | plg_task_privacyconsent (5.0.0) 1 | plg_task_requests (4.1) 1 | plg_task_updatenotification (5.0.0) 1 | plg_task_rotatelogs (5.0.0) 1 | plg_quickicon_privacycheck (3.9.0) 1 | plg_quickicon_extensionupdate (3.0.0) 1 | plg_quickicon_downloadkey (4.0.0) 1 | plg_quickicon_overridecheck (4.0.0) 1 | plg_quickicon_joomlaupdate (3.0.0) 1 | plg_quickicon_eos (4.4.0) 1 | plg_quickicon_phpversioncheck (3.7.0) 1 | plg_fields_imagelist (3.7.0) 1 | plg_fields_sql (3.7.0) 1 | plg_fields_url (3.7.0) 1 | plg_fields_usergrouplist (3.7.0) 1 | plg_fields_calendar (3.7.0) 1 | plg_fields_color (3.7.0) 1 | plg_fields_textarea (3.7.0) 1 | plg_fields_user (3.7.0) 1 | plg_fields_media (3.7.0) 1 | plg_fields_checkboxes (3.7.0) 1 | plg_fields_subform (4.0.0) 1 | plg_fields_list (3.7.0) 1 | plg_fields_radio (3.7.0) 1 | plg_fields_text (3.7.0) 1 | plg_fields_integer (3.7.0) 1 | plg_fields_editor (3.7.0) 1 | plg_actionlog_joomla (3.9.0) 1 | plg_multifactorauth_email (4.2.0) 1 | plg_multifactorauth_totp (3.2.0) 1 | plg_multifactorauth_fixed (4.2.0) 0 | plg_multifactorauth_webauthn (4.2.0) 1 | plg_multifactorauth_yubikey (3.2.0) 1 | plg_workflow_featuring (4.0.0) 1 | plg_workflow_notification (4.0.0) 1 | plg_workflow_publishing (4.0.0) 1 | plg_behaviour_taggable (4.0.0) 1 | plg_behaviour_compat (5.0.0) 1 | plg_behaviour_versionable (4.0.0) 1 | plg_authentication_ldap (3.0.0) 0 | plg_authentication_cookie (3.0.0) 1 | plg_authentication_joomla (3.0.0) 1 |
3rd Party:: System - Helix Ultimate Framework (2.0.18) 1 | plg_system_osmylicensesmanager (2.0.16) 1 | System - SEO Site Attributes for Jo (4.5.3) ? | PLG_SYSTEM_BACKUPONUPDATE (9.8.5) 1 | System - SP PageBuilder (5.2.5) 1 | plg_system_jmedia (1.0.0) 1 | plg_system_jce (2.9.61) 1 | PLG_SYSTEM_ADMINTOOLS (7.4.8) 1 | System - SP Page Builder Pro Update (5.2.5) ? | System - Quix System Plugin (4.5.3) 1 | plg_content_jce (2.9.61) 1 | Custom Tables (3.2.3) 1 | Content - Quix Content Plugin (4.5.3) 1 | Editors Button - Quix editors-xtd P (4.5.3) ? | plg_finder_sppagebuilder (5.2.5) 0 | plg_finder_quix (4.5.3) 1 | PLG_WEBSERVICES_AKEEBABACKUP (9.8.5) 1 | SP Simple Portfolio - SP Page Build (5.2.5) ? | plg_installer_jce (2.9.61) 1 | plg_extension_jce (2.9.61) 1 | plg_editors_codemirror (6.0.0) 1 | plg_editors_tinymce (6.7.3) 1 | plg_editors_jce (2.9.61) 1 | PLG_TASK_AKEEBABACKUP (9.8.5) 1 | PLG_TASK_ADMINTOOLS (7.4.8) 1 | PLG_QUICKICON_AKEEBABACKUP (9.8.5) 1 | plg_quickicon_jce (2.9.61) 1 | plg_quickicon_quix (4.5.3) 0 | plg_fields_mediajce (2.9.61) 1 | plg_search_sppagebuilder (5.2.5) 0 | PLG_CONSOLE_AKEEBABACKUP (9.8.5) 1 | PLG_CONSOLE_ADMINTOOLS (7.4.8) 1 | PLG_ACTIONLOG_AKEEBABACKUP (9.8.5) 0 | PLG_ACTIONLOG_ADMINTOOLS (7.4.8) 0 | PLG_AUTHENTICATION_SHACKUSERSWITCHI (2.0.3) ? | Quix - Builder Elements (4.5.3) 0 |
Templates :: Site :: cassiopeia (1.0) 1 | shaper_helixultimate (2.0.18) 1 | Atom (1.0.0) 1 |
Templates :: Admin :: atum (1.0) 1 |

Statistics: Posted by dkchick — Sat Jan 27, 2024 6:31 pm



Viewing all articles
Browse latest Browse all 1913

Trending Articles