The Joomla! Forum ™

Download

Demo


Board index » Joomla! Older Version Support » Joomla! 1.0 » Security - 1.0.x » 3rd Party/Non Joomla! Security Issues



Post new topic Reply to topic  Page 1 of 1
  [ 3 posts ] 
  Print view Previous topic | Next topic 
Author Message
tatemuin
 Post subject: Vulnerabilities
PostPosted: Wed Aug 31, 2011 6:48 am 
Joomla! Fledgling
Joomla! Fledgling

Joined: Wed May 27, 2009 11:21 am
Posts: 3
a)seemes that user credentials are sent to /administrator/index.php in clear text and
b)from administrators PC because Password type input named pass from form named loginForm with action index.php has auto-complete enabled). My Question is how secure is this interface as far as hacking is concerned and if not what can be my solution to it.
Top
 Profile  
 
dylanjh
 Post subject: Re: Vulnerabilities
PostPosted: Wed Aug 31, 2011 10:04 am 
User avatar
Joomla! Ace
Joomla! Ace

Joined: Fri Sep 22, 2006 6:22 pm
Posts: 1695
Location: UK
a) Yes it will be unless you make the admin interface use ssl, there are a number of extensions in the JED that will do this.
b)I dont fully understand this, but I presume you are referring to the autocomplete feature most browsers have to make logging in easier. The only option is to disable this functionality in the browsers settings.

As far as securing the admin area, I normally use .htaccess to prevent anyone but my ip from accessing the administrator folder. You will need a static public IP for this however

_________________
EmailAsUsername - Remove Usernames Joomla! registration http://www.lunarhotel.co.uk
Many other extensions supported.
RsJoomla! RsForms RsMembership http://www.lunarhotel.co.uk/rsjoomla.php
Top
 Profile  
 
tatemuin
 Post subject: Re: Vulnerabilities
PostPosted: Thu Sep 01, 2011 7:09 am 
Joomla! Fledgling
Joomla! Fledgling

Joined: Wed May 27, 2009 11:21 am
Posts: 3
Thank you on the first part on the user credentials i hope i will try to make head n tails out of your reply, to use SSL. i will need to rephrase on the other part (b).
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 3 posts ] 


Board index » Joomla! Older Version Support » Joomla! 1.0 » Security - 1.0.x » 3rd Party/Non Joomla! Security Issues

Who is online

Users browsing this forum: No registered users and 3 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group