PHPackages                             move-elevator/me-backend-security - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. move-elevator/me-backend-security

ActiveTypo3-cms-extension

move-elevator/me-backend-security
=================================

Advanced security for the TYPO3 backend

3.0.3(2y ago)10153.6k↓16.7%4[1 issues](https://github.com/move-elevator/me_backend_security/issues)GPL-2.0-or-laterPHPPHP ^8.0

Since Dec 7Pushed 2y ago11 watchersCompare

[ Source](https://github.com/move-elevator/me_backend_security)[ Packagist](https://packagist.org/packages/move-elevator/me-backend-security)[ RSS](/packages/move-elevator-me-backend-security/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependencies (6)Versions (23)Used By (0)

TYPO3 Extension "me\_backend\_security"
=======================================

[](#typo3-extension-me_backend_security)

An extension to specify secure password rules and force backend users to change their passwords, if the password is older then a defined limit.

In extension settings you can define:

- Minimum number of capital characters
- Minimum number of lowercase characters
- Minimum number of digits
- Minimum number of special characters
- Minimum length of password
- Maximum days before password must change

If a backend user logs in and his password needs to change, user will be logged out and redirected to comfortable password change form. After password was changed, the user will automatically logged in and can start his work in backend.

The password rules will also be checked when the user tries to change his password in user settings in backend.

Users imported from extension ig\_ldap\_sso\_auth will be ignored.

Install and usage
-----------------

[](#install-and-usage)

1. Basic install via composer

```
composer req "move-elevator/me-backend-security":"^3.0"

```

2. Modify extension settings in TYPO3 backend
3. Be safer :)

Checks
------

[](#checks)

Run each command in the project root directory.

### Execute PHPUnit tests

[](#execute-phpunit-tests)

```
composer phpunit

```

### Execute PHPCS checks

[](#execute-phpcs-checks)

```
composer phpcs

```

### Fix PHPCS issues

[](#fix-phpcs-issues)

```
composer phpcs:fix

```

### Execute PHPSTAN checks

[](#execute-phpstan-checks)

```
composer phpstan

```

### Execute all quality checks

[](#execute-all-quality-checks)

```
composer php:validate

```

Contact
=======

[](#contact)

- Mail:
- Website:

Changelog
=========

[](#changelog)

2023-07-31 - Ronny Hauptvogel

```
Release 3.0.3
---
Bugfix: Fix backend user generation handling via TYPO3 backend

```

2023-06-04 - Ronny Hauptvogel

```
Release 3.0.2
---
Bugfix: Fix extension dependency constraints
Bugfix: Fix MFA authentication loop
Feature: Update password reset login form template

```

2022-06-22 - Ronny Hauptvogel

```
Release 3.0.1
---
Bugfix: Fix FrontendBackendUserAuthentication issue which will break third-party extension ext_localconf.php files

```

2022-05-19 - Ronny Hauptvogel

```
Release 3.0.0
---
Feature: Add TYPO3 11 compatibility
Feature: PHP 8.0/ 8.1 compatibility
Feature: Drop TYPO3 9 and 10 support

```

2021-12-30 - Ronny Hauptvogel

```
Release 2.0.7
---
Feature: Add password validation rules to password reset form

```

2021-07-19 - Ronny Hauptvogel

```
Release 2.0.6
---
Bugfix: Fix broken language keys

```

2021-04-23 - Ronny Hauptvogel

```
Release 2.0.5
---
Feature: Add .gitattributes file
Feature: Add composer extension key
Bugfix: Add proper type casting for hooks

```

2020-12-17 - Ronny Hauptvogel

```
Release 2.0.4
---
Feature: Add typo3/cms-rsaauth as conflict

```

2020-12-09 - Ronny Hauptvogel

```
Release 2.0.3
---
Bugfix: Update PHP version constraint to include newer PHP7 versions

```

2020-11-06 - Ronny Hauptvogel

```
Release 2.0.2
---
Feature: TYPO3 10 compatibility
Feature: Allow new special characters to validator
Bugfix: Invalid password length with german umlauts

```

2019-05-03 - Philipp Heckelt

```
Release 2.0.1
---
Bugfix: PHP7 typehints for hooks

```

2019-04-08 - Philipp Heckelt

```
Release 2.0.0
---
Feature: TYPO3v9 compatibility

```

2018-08-06 - Philipp Heckelt

```
Release 1.1.4
---
Bugfix: Fix detection of existing accounts

```

2018-02-01 - Philipp Heckelt

```
Release 1.1.3
---
Bugfix: Validate that the old and new password are not the same in the user settings
Bugfix: Existing accounts no longer must change their password immediately after activating the extension
Feature: Allow new special characters to validator

```

2018-01-18 - Philipp Heckelt

```
Release 1.1.2
---
Bugfix: Fix redirect on non-ssl websites if password change is required

```

2018-01-10 - Philipp Heckelt

```
Release 1.1.1
---
Bugfix: Fix hook exception in frontend mode on active backend user login

```

2017-12-22 - Philipp Heckelt

```
Release 1.1.0
---
Feature: Optimized validator error messages
Feature: Validator for same passwords
Feature: Different Message for first password change

```

2017-12-04 - Philipp Heckelt

```
Release 1.0.4
---
Feature: Use internal database connection for TYPOv8 compatibility, remove database connection factory

```

2017-12-08 - Philipp Heckelt

```
Release 1.0.3
---
Bugfix: Optional port in database configuration

```

2017-12-08 - Philipp Heckelt

```
Release 1.0.2
---
Bugfix: Language service

```

2017-12-08 - Philipp Heckelt

```
Release 1.0.1
---
Bugfix: Extension configuration

```

2017-12-04 - Philipp Heckelt

```
Release 1.0.0

```

Roadmap
=======

[](#roadmap)

- Blacklist for usernames like "admin"

###  Health Score

42

—

FairBetter than 90% of packages

Maintenance18

Infrequent updates — may be unmaintained

Popularity39

Limited adoption so far

Community16

Small or concentrated contributor base

Maturity78

Established project with proven stability

 Bus Factor1

Top contributor holds 61.1% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~98 days

Recently: every ~143 days

Total

22

Last Release

1021d ago

Major Versions

1.1.4 → 2.0.02019-04-09

2.0.7 → 3.0.02022-05-31

PHP version history (5 changes)1.0.0PHP &gt;=5.6

2.0.0PHP &gt;=7.2

2.0.2PHP &gt;=7.2,&lt;=7.4

2.0.3PHP ^7.2

3.0.0PHP ^8.0

### Community

Maintainers

![](https://www.gravatar.com/avatar/f71257bb4db7f3adcabdc7d93e0f84c00aa50689b1411976b57f6a57ed7b6b2e?d=identicon)[move-elevator](/maintainers/move-elevator)

---

Top Contributors

[![phe95-me](https://avatars.githubusercontent.com/u/17025833?v=4)](https://github.com/phe95-me "phe95-me (165 commits)")[![Mainbird](https://avatars.githubusercontent.com/u/16002519?v=4)](https://github.com/Mainbird "Mainbird (103 commits)")[![hpa-move](https://avatars.githubusercontent.com/u/19644343?v=4)](https://github.com/hpa-move "hpa-move (2 commits)")

###  Code Quality

TestsPHPUnit

Static AnalysisPHPStan

Code StylePHP CS Fixer

Type Coverage Yes

### Embed Badge

![Health badge](/badges/move-elevator-me-backend-security/health.svg)

```
[![Health](https://phpackages.com/badges/move-elevator-me-backend-security/health.svg)](https://phpackages.com/packages/move-elevator-me-backend-security)
```

###  Alternatives

[fluidtypo3/vhs

This is a collection of ViewHelpers for performing rendering tasks that are not natively provided by TYPO3's Fluid templating engine.

1954.1M49](/packages/fluidtypo3-vhs)[in2code/powermail

Powermail is a well-known, editor-friendly, powerful and easy to use mailform extension for TYPO3 with a lots of features

982.5M38](/packages/in2code-powermail)[typo3/testing-framework

The TYPO3 testing framework provides base classes for unit, functional and acceptance testing.

675.0M775](/packages/typo3-testing-framework)[fluidtypo3/flux

The flux package from FluidTYPO3

152982.2k20](/packages/fluidtypo3-flux)[netresearch/rte-ckeditor-image

Image support in CKEditor for the TYPO3 ecosystem - by Netresearch

63991.3k4](/packages/netresearch-rte-ckeditor-image)[friendsoftypo3/content-blocks

TYPO3 CMS Content Blocks - Content Types API | Define reusable components via YAML

96374.6k23](/packages/friendsoftypo3-content-blocks)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
