Emergency access

If someone guesses passwords from many addresses at once, the login throttle can hit you too. The emergency access exists for this case. It can only be triggered with access to the server’s files, not over the network.

Triggering emergency access

1. Download config.php via FTP, set 'notzugang' => true and upload it again.

2. Open the login page. It is now switched off, and the server sends an email Emergency access activated with a secret address to the administrator address from config.php.

3. Open the address from the email. There you log in quite normally, with password and second factor. The address does not replace the login, it only makes it reachable again.

4. Set 'notzugang' => false in config.php again.

The emergency access ends by itself after 24 hours. An owner can end it earlier in the system administration with End emergency access now. If config.php contains 'notzugang' => false, it is off in any case.

Why only the administrator address

The email deliberately goes only to the address from config.php, not to all users. Otherwise any user with access to a mailbox could gain access. And because password and second factor are still required, an intercepted link alone is not enough either.