Page 1 of 1

Feature request (webui): No password

Posted: Tue Sep 16, 2008 3:16 am
by mrbrdo
Can you give an option to disable password protection of the webui (at least allow blank password and in that case do not prompt for it)?
I have many apps on my server which are all only accessible via VPN and i have a password before you can enter any of them already, so now i have a double-password protection. Also i don't think torrents are that important to even need a password protection anyhow.

Thanks.

Re: Feature request (webui): No password

Posted: Mon Oct 06, 2008 7:46 pm
by DelugeFanBoi
It would open a critical security hole.
Imagine a bad guy starts an infected torrent on your machine and set up the System-Autostart-Directory of your OS as default DIR to move the completed torrent to. Thats why you should change the standard port and set up a password.

Don't ask who cares so much for other peolpe's downloads. A bot can be easily set up to hunt for torrent-clients that are known for such weaknesses and people who are not aware of it are going to get problems.

Cheers

Re: Feature request (webui): No password

Posted: Tue Oct 07, 2008 6:08 am
by mvoncken
In 1.1 the sessions are persistent/saved.
So you would not have to login that much.