Security Advice

[jack_666]

Hi I'm a new user of Cacti and off course it's great !

But I've noticed that you can skip the login page if you put graph_view.php?action=list

An example: Click Here

My solution in my site is adding a ".htaccess" and now it's ok




I know is something newbie my comment but is to give a hand to thoseones that don't notice this..

Byes

[moonman]

i think is because guest account is active disable it and it will be ok


btw why you are with older version

[drope]

look at what just a google search can do : http://www.google.com/search?num=100&hl ... tnG=Search

[rony]

All I can say to that google search is, robot.txt is your friend.

It maybe a good idea for cacti to start including a robot.txt file so search engines do not cache the information located in the cacti directories.

Btw, if the guest account is defined in the settings, then going to graph_view.php without login is a normal behavor.

[drope]

I prefer use a .htaccess, more powerful