Go Back   FlashFXP Forums > > >

Suggestions Post suggestions for upcoming versions

 
 
Thread Tools Display Modes
Old 05-17-2005, 10:33 PM   #1
ygoldfill
Junior Member
FlashFXP Registered User
 
Join Date: May 2005
Posts: 6
Cool Ability to use blank user name and password

If microsoft's FTP client ( or any FTP client that I know for that matter) can do it so should flashFXP.

flashFXP is one of the best programs I used.
ygoldfill is offline  
Old 05-17-2005, 11:17 PM   #2
MxxCon
Super Duper
FlashFXP Beta Tester
 
Join Date: Oct 2001
Location: Brooklyn, NY
Posts: 3,878
Default

what's the point of it?
i don't see any need for this
__________________
[Sig removed by Administrator: Signature can not exceed 20GB]
MxxCon is offline  
Old 05-17-2005, 11:42 PM   #3
ygoldfill
Junior Member
FlashFXP Registered User
 
Join Date: May 2005
Posts: 6
Default

I like to the user name /password for FTP on the product I am working on to empty since the same pair is used for telnet
to configure the product. I don't like to type a lot.
Why can't this be done as the Anonymous check box is already there ?
ygoldfill is offline  
Old 05-18-2005, 01:24 AM   #4
MxxCon
Super Duper
FlashFXP Beta Tester
 
Join Date: Oct 2001
Location: Brooklyn, NY
Posts: 3,878
Default

i don't understand what you said
__________________
[Sig removed by Administrator: Signature can not exceed 20GB]
MxxCon is offline  
Old 05-18-2005, 05:43 AM   #5
Hetfield
Senior Member
FlashFXP Scripter
 
Join Date: Nov 2002
Posts: 334
Default

I think he means that he wants to have an empty value for username (in ftp.exe just enter through it). Besides not getting the point for this, i don't think it's good security wise as well.
Hetfield is offline  
Old 05-18-2005, 10:34 AM   #6
ygoldfill
Junior Member
FlashFXP Registered User
 
Join Date: May 2005
Posts: 6
Default

Obviously it is not safe but in my develovment environment
it is simpler.
The point is that flashFxp should not prevent me from loging
into a server to which I can easily log in with any other
client !
ygoldfill is offline  
Old 05-18-2005, 10:57 AM   #7
DayCuts
Senior Member
FlashFXP Beta Tester
 
Join Date: Dec 2003
Posts: 421
Default

It would be of no use to me, but i can't see the harm in supporting blank un's/pw's.

However i do fail to see the point, if you add the info to the site manager, it will make absolutely no difference if you have set usernames/passwords or not. You will never have to type them anyway...

One thing i dont quite understand, does the telnet and ftp on the system you are trying to access share the same user db??

If i understand the situation correctly, What you are ultimately trying to do is avoid having to enter a un/pw through telnet, and the issue with flashfxp only arises because telnet and the ftp server share a common user access database?

Why not just add an Annonymous/Annonymous account for use with ftp access, and leave the blank telnet access?

Although to be completely honest i think it's not only unwise, but these days almost idiotic to allow blank/annonymous access to telnet, and ftp too for that matter (depending on the priviledges)
DayCuts is offline  
Old 05-18-2005, 11:12 AM   #8
ygoldfill
Junior Member
FlashFXP Registered User
 
Join Date: May 2005
Posts: 6
Default

Yes - the Telnet and FTP use the same database for username/password.
Again - this a development environment so there is no
security issue.
Sophisticated Telnet and FTP clients are not always available
when trying to log into the product so I was looking
for the shortst way.

BTW, the Anonymous check button in the quick connect
is somewhat misleading since it does send the anonymous
string even if not checked.
ygoldfill is offline  
Old 06-10-2005, 03:54 PM   #9
trodas
Junior Member
 
trodas's Avatar
 
Join Date: Jun 2005
Posts: 18
Default

My vote for unrestricting this as well


DayCuts - hey, it actually could be quite good security I would NEVER EVER expect that (that it is, until today), so I will try enter many usernames and passwords and it will all fail
trodas is offline  
Old 06-10-2005, 06:40 PM   #10
DayCuts
Senior Member
FlashFXP Beta Tester
 
Join Date: Dec 2003
Posts: 421
Default

I can see plenty of reason to unrestrict this also. As for the guessing, if a box is open and it is scanned by somebody who has half a clue what they are doing they will pick up the blank/empty un+pw rather quickly.
DayCuts is offline  
 

Tags
client, flashfxp, ftp, matter, programs

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 03:30 PM.

Parts of this site powered by vBulletin Mods & Addons from DragonByte Technologies Ltd. (Details)