rejetto forum

Software => HFS ~ HTTP File Server => Bug reports => Topic started by: Foggy on September 16, 2007, 09:24:46 AM

Title: http://user@host - logs in...
Post by: Foggy on September 16, 2007, 09:24:46 AM

If you put the wrong user name in a link you can still log in even though the user doesnt exist.

I tried http://fred@localhost and I successfully logged in. :O

I dont think its such a big deal because It only worked because the root of my file system doesnt have restricted access for users set.

Title: Re: http://user@host - logs in...
Post by: rejetto on September 18, 2007, 08:34:09 AM

fixed in next build