Ability to use blank user name and password

[ygoldfill]

If microsoft's FTP client ( or any FTP client that I know for that matter) can do it so should flashFXP.

flashFXP is one of the best programs I used.

[MxxCon]

what's the point of it?
i don't see any need for this

[ygoldfill]

I like to the user name /password for FTP on the product I am working on to empty since the same pair is used for telnet
to configure the product. I don't like to type a lot.
Why can't this be done as the Anonymous check box is already there ?

[MxxCon]

i don't understand what you said

[Hetfield]

I think he means that he wants to have an empty value for username (in ftp.exe just enter through it). Besides not getting the point for this, i don't think it's good security wise as well.

[ygoldfill]

Obviously it is not safe but in my develovment environment
it is simpler.
The point is that flashFxp should not prevent me from loging
into a server to which I can easily log in with any other
client !

[DayCuts]

It would be of no use to me, but i can't see the harm in supporting blank un's/pw's.

However i do fail to see the point, if you add the info to the site manager, it will make absolutely no difference if you have set usernames/passwords or not. You will never have to type them anyway...

One thing i dont quite understand, does the telnet and ftp on the system you are trying to access share the same user db??

If i understand the situation correctly, What you are ultimately trying to do is avoid having to enter a un/pw through telnet, and the issue with flashfxp only arises because telnet and the ftp server share a common user access database?

Why not just add an Annonymous/Annonymous account for use with ftp access, and leave the blank telnet access?

Although to be completely honest i think it's not only unwise, but these days almost idiotic to allow blank/annonymous access to telnet, and ftp too for that matter (depending on the priviledges)

[ygoldfill]

Yes - the Telnet and FTP use the same database for username/password.
Again - this a development environment so there is no
security issue.
Sophisticated Telnet and FTP clients are not always available
when trying to log into the product so I was looking
for the shortst way.

BTW, the Anonymous check button in the quick connect
is somewhat misleading since it does send the anonymous
string even if not checked.

[trodas]

My vote for unrestricting this as well


DayCuts - hey, it actually could be quite good security I would NEVER EVER expect that (that it is, until today), so I will try enter many usernames and passwords and it will all fail

[DayCuts]

I can see plenty of reason to unrestrict this also. As for the guessing, if a box is open and it is scanned by somebody who has half a clue what they are doing they will pick up the blank/empty un+pw rather quickly.