rejetto forum

http://user@host - logs in...

Foggy · 2 · 7677

0 Members and 1 Guest are viewing this topic.

Offline Foggy

  • Tireless poster
  • ****
    • Posts: 806
    • View Profile
If you put the wrong user name in a link you can still log in even though the user doesnt exist.

I tried http://fred@localhost and I successfully logged in. :O

I dont think its such a big deal because It only worked because the root of my file system doesnt have restricted access for users set.


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile