Page 1 of 1

About page security concerns

PostPosted: Tue May 14, 2013 12:33 pm
by Cook66
Hey

The about page is accessible by anyone logged in (as far as I can tell) and it has the log in plaintext. It also has details about the server OS and a few other things.

Is it possible to remove any sensitive data or make it admin only?

Re: About page security concerns

PostPosted: Fri May 17, 2013 10:06 am
by lucidwings
I second that. I removed the link in source code (of "top" I guess) but its actually still there...