Access to PMA to anyone???

[grungy]

BeNe Wrote:

grungy Wrote:Well just to point out, that the setup program in VHCS by default creates a passwordless account for the FTP user! So just by accessing the PMA URL for a domain, entering the FTP username and clicking login without a password would let a 'hacker' in and explose ftp accounts...

By default I mean, the setup program will let you just hit enter, and continue with the setup when you are asked for the FTP USER password...!

A Passwordless account by Default? Are you sure?
In the Setup you were ask about a password for vftp

Just hit enter when you are asked for the password...