Quote:
Originally Posted by EvilLS1
It is mentioned in the first post. It clearly states that it will send the password.
Yes, if someone is close to guessing your (the admins) password you will know about it.
|
Yeah i know it says the password is sent but does the average user thats installed this know that its went from not sending the plaintext password over http when you login to sending it?
Most people seem to appreciate this hack but I doubt they know that it weakens security, if they were really that bothered they'd just rename the admin panel to something totally unguessable and put a http authentication box on top of the directory.