Security hole?

[MikeR]

Suddenly FP will open both of my hosted siies (2 different domains)
without prompting for a signon. Opening a local web on my box does
prompt for the signon.

Has FP started to remember me, or do I need to contact my host? Any
test I can do?

Thanks, Mike

 

[Stefan B Rusynko]

I would have the host check the permissions on the sites
- FP (via IE) will remember your login credentials
- but you should still get the authentication dialog showing before it opens the site the 1st time

--

_____________________________________________
SBR @ ENJOY (-: [ Microsoft MVP - FrontPage ]
"Warning - Using the F1 Key will not break anything!" (-;
_____________________________________________


| Suddenly FP will open both of my hosted siies (2 different domains)
| without prompting for a signon. Opening a local web on my box does
| prompt for the signon.
|
| Has FP started to remember me, or do I need to contact my host? Any
| test I can do?
|
| Thanks, Mike

 

[MikeR]

I would have the host check the permissions on the sites
- FP (via IE) will remember your login credentials
- but you should still get the authentication dialog showing before it opens the site the 1st time

Thanks Stefan, I'll give 'em a call. My FP has never remembered my
password, just the User.

 

[MikeR]

Thanks Stefan, I'll give 'em a call. My FP has never remembered my
password, just the User.

I called my host this morning, and they tell me when they try to
connect with FP 03, it prompts for a signon.

My 02 doesn't ask. Even if it were remembering the signon, wouldn't
the dialog display anyhow? The remember box is NOT checked.

I've got IE 7.

 

[Ronx]

In IE, go to Tools->Internet Options
CLick Security Tag
Click Trusted Sites (green arrow)
Click Sites button
If your site is listed here, then Close, and

Click Custom Level... button
Scroll down to the bottom
In Logon section, which radio is selected? Select Prompt to ensure a logon
dialogue.

Also do the same for Local Intranet - check the Authorisation settings.

I have several websites running on two Windows 2003 servers that are listed
in the Trusted Sites zone on this PC - those on one server do not give a
logon dialogue, but the others do. All the sites require logons from other
computers.

 

[MikeR]

In IE, go to Tools->Internet Options
CLick Security Tag
Click Trusted Sites (green arrow)
Click Sites button
If your site is listed here, then Close, and

Click Custom Level... button
Scroll down to the bottom
In Logon section, which radio is selected? Select Prompt to ensure a logon
dialogue.

Also do the same for Local Intranet - check the Authorisation settings.

I have several websites running on two Windows 2003 servers that are listed
in the Trusted Sites zone on this PC - those on one server do not give a
logon dialogue, but the others do. All the sites require logons from other
computers.

Thanks Ron -

That explains it.

I don't remember setting that up, but it's getting to the point I can
hide my own Easter eggs....