Page 1 of 1

System Accepts any password with correct username.

Posted: Sun Feb 03, 2008 7:28 am
by mad
Core FTP Server 1.0 Build 244

User Details - General
Always allow login (unchecked)
still allows any password with a valid username to access system and perform FTP commands permitted for that user. Seems the config does not save the checked box. I have attempted to change settings while service is running and restart and stopped, change settings then restarted service. On all attempts the config is not saved.

The same thing occurs when trying to check "Allow users to change password", check the box and it is not checked when you open the GUI after save.

Checking "Anonymous User", does the oppisite, when checked no anonymous access is allowed. Unchecked it allows anonymous login.

Posted: Tue Feb 05, 2008 3:10 pm
by mad
To clarify what I mean by"Always allow login (unchecked)
still allows any password with a valid username to access system and perform FTP commands permitted for that user. "

Example:
What is in the config:
User: joe
password: thisisthepassword

The user logs in with:
User: joe
password: takethiswrongpassword

and it still allows the user to access the system with the incorrect password.