Serious Security Lapse

ScarBittenRoss · July 25th, 2003, 8:45 AM

When logging into my Control Panel, its not asking me for my username and password as usual - and, i tried this on an open computer at work as well, and its allowing me to access without any username and password.

Please can you make sure authentication is being used for CPanel:

I'm on Pico.

OmicroN · July 25th, 2003, 9:33 AM

I just checked and was prompted for a password. So either it’s using a session or you checked the box to remember your username and password in which case it should still prompt you, but just have the information filled in. Sessions will last until your browser has been full closed.

So if you login now, open another window with some other site like these forums, and then close the cpanel window and go back to it either with a new window or the other window; it still thinks you’re logged in so it just displays the main cpanel page. As long as 1 instance of your browser is open, the session with remain.

ScarBittenRoss · July 25th, 2003, 9:42 AM

Quote:

Originally posted by OmicroN

Jul 25 2003, 8.33 am
I just checked and was prompted for a password. So either it’s using a session or you checked the box to remember your username and password in which case it should still prompt you, but just have the information filled in. Sessions will last until your browser has been full closed.

So if you login now, open another window with some other site like these forums, and then close the cpanel window and go back to it either with a new window or the other window; it still thinks you’re logged in so it just displays the main cpanel page. As long as 1 instance of your browser is open, the session with remain.

If you read my post you would have read this:

Quote:

i tried this on an open computer at work as well, and its allowing me to access without any username and password.

I'm no n00b. Something is up. I'm using Firebird at home, and Netscape/Mozilla at work. I refuse to use IE. So it might be a problem specific to those browsers.

Anyway, i've changed my password just incase.

**FyreFox** · July 25th, 2003, 11:48 AM

it's kinda odd that it just happens to go to YOUR cpanel and not someone elses.

Would it matter if you were on a network and clicked save password?

OmicroN · July 25th, 2003, 2:59 PM

Quote:

Originally posted by ScarBittenRoss

Jul 25 2003, 1.42 pm
If you read my post you would have read this:

Quote:

i tried this on an open computer at work as well, and its allowing me to access without any username and password.

And if you read my post you would of read:

Quote:

I just checked and was prompted for a password.

Have you tried deleting your internet cache; and no it has nothing to do with any browser. I just downloaded this Firebird browser as well as Netscape, Mozilla, and Opera; and the I get prompted on each one.

And to this

Quote:

I'm no n00b. Something is up.

No one said you are. It's called support; your sites cpanel is fine. I have tried it in multiple place on different computers, all with the same results. It's something with your configuration, network, computer setting, etc... now what they may be, I don't know... can't know everything in the world now can we. These are just my suggestions/opinions to the topic; taking them or leaving them is up to you.

ScarBittenRoss · July 25th, 2003, 5:28 PM

Quote:

Originally posted by OmicroN

Jul 25 2003, 1.59 pm

Quote:

Originally posted by ScarBittenRossJul 25 2003, 1.42 pm
If you read my post you would have read this:

Quote:

i tried this on an open computer at work as well, and its allowing me to access without any username and password.

And if you read my post you would of read:

Quote:

I just checked and was prompted for a password.

Have you tried deleting your internet cache; and no it has nothing to do with any browser. I just downloaded this Firebird browser as well as Netscape, Mozilla, and Opera; and the I get prompted on each one.

And to this

Quote:

I'm no n00b. Something is up.

No one said you are. It's called support; your sites cpanel is fine. I have tried it in multiple place on different computers, all with the same results. It's something with your configuration, network, computer setting, etc... now what they may be, I don't know... can't know everything in the world now can we. These are just my suggestions/opinions to the topic; taking them or leaving them is up to you.

I know you were only trying to help, thanks. The problem seems to be sorted now. Can't explain it.

At work i'm on a network, yes. I cleared the cache, didn't save pass, etc, and it still logged in itself. Anyway, its cleared up whatever it was, and is prompting for login now.

OmicroN · July 25th, 2003, 5:59 PM

:bananadance:

July 25th, 2003, 8:45 AM	#1 (permalink)
ScarBittenRoss Registered User Seasoned Poster Joined in Jul 2003 40 posts Gave thanks: 0 Thanked 0 times	When logging into my Control Panel, its not asking me for my username and password as usual - and, i tried this on an open computer at work as well, and its allowing me to access without any username and password. Please can you make sure authentication is being used for CPanel: I'm on Pico. __________________ ---- Ross ---- Domain: scarbitten.co.uk Server: Pico

July 25th, 2003, 9:33 AM	#2 (permalink)
OmicroN Registered User Comfy Contributor Joined in May 2003 Lives in Florida 118 posts Gave thanks: 0 Thanked 0 times	I just checked and was prompted for a password. So either it’s using a session or you checked the box to remember your username and password in which case it should still prompt you, but just have the information filled in. Sessions will last until your browser has been full closed. So if you login now, open another window with some other site like these forums, and then close the cpanel window and go back to it either with a new window or the other window; it still thinks you’re logged in so it just displays the main cpanel page. As long as 1 instance of your browser is open, the session with remain. __________________ Profession: Programmer, Gamer, Web Developer Website: http://www.reanimated.net/ - Server: Quela

July 25th, 2003, 11:48 AM	#4 (permalink)
FyreFox Undercover Genius Super #1 Joined in May 2003 Lives in Tampa, FL Hosted on Vanilla 2,989 posts Gave thanks: 27 Thanked 37 times	it's kinda odd that it just happens to go to YOUR cpanel and not someone elses. Would it matter if you were on a network and clicked save password? __________________ When one door of happiness closes, another opens; but often we look so long at the closed door that we do not see the one which has been opened for us. - Helen Keller

July 25th, 2003, 5:59 PM	#7 (permalink)
OmicroN Registered User Comfy Contributor Joined in May 2003 Lives in Florida 118 posts Gave thanks: 0 Thanked 0 times	:bananadance: __________________ Profession: Programmer, Gamer, Web Developer Website: http://www.reanimated.net/ - Server: Quela

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread:

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)