Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
This release provides all Logintoboggan features for Drupal 8, and also works with Drupal 9. It does not provide sub-modules that exist in Drupal 7. As it does not yet have automated tests, it can't be released as a stable version so it should be used with caution.
#239136 by hunmonk: remove pre auth, add auth user in $account object in email validation code.
#239571 by hunmonk: fix broken mailing functionality. Resend validation email code is now properly updated to 6.x, logintoboggan_mail() was not using user saved mail subjects/bodies.
This release fixes a potential security vulnerability, though it is practically impossible to exploit. All sites using LoginToboggan should consider upgrading, but this should not be considered an urgent task. Please see DRUPAL-SA-2007-016 for more information.
In addition, this release includes the following bug fixes:
FIXED: removed unneccessary textfield length for email confirmation
FIXED: proper destination handling when a login attempt fails.
This release fixes a potential security vulnerability, though it is practically impossible to exploit. All sites using LoginToboggan should consider upgrading, but this should not be considered an urgent task. Please see DRUPAL-SA-2007-016 for more information.
In addition, this release includes the following changes: