Opened 20 years ago
Last modified 17 years ago
#2206 closed Feature request
[Server] Admin authorization from localhost as well
| Reported by: | fuzzillogic | Owned by: | |
|---|---|---|---|
| Priority: | normal | Component: | FileZilla Server |
| Keywords: | Cc: | fuzzillogic, Tim Kosse, Alexander Schuch | |
| Component version: | Operating system type: | ||
| Operating system version: |
Description
Currently, when connection to FZ Server's Admin
Interface on the current machine (thus localhost) you
never need enter the admin password; you always can
connect.
On a machine where only the Administrator can log-in this
isn't a big issue. But when several users use the same
machine, they would all have the possibility to connect to
FZ Server's Admin Interface without restriction, since
they all obviously connect from localhost. Of course, this
is quite a security risk. (Depending on how much you
trust your users :)
So therefor my request: either remove the no-password-
login from localhost, or add the option that one *always*
has to authorize with a password when connecting to the
Admin Interface, even from localhost.
This feature has been implemented. Please update to the most
recent version of FileZilla.