Are your test accounts unsecure?

**Ashley** · 02-21-2007, 11:12 PM

About half an hour ago, I came across a forum that disabled guest searching. For some reason, my attention turned to the login box. I simply typed in the username and password 'test' and bingo - it worked! And I did my search.

Then I started to think - there must be other forum admins with test accounts. Now a user account typically can't do more than completley spam your forum <which is quite easy to clean with a click of the magic "delete all posts by this user" button>, but if, for example, you were testing moderator/administrator accounts on your forum, and your test account had a simple-to-guess password with mod/admin rights - then some nasty person could wreck havoc on your forum. So, secure those test accounts! Just put a password which isn't easy to guess on them, or simply delete the account when you're done testing.

**demojames** · 02-21-2007, 11:24 PM

If they were smart I am sure that the test account only has viewing permissions only, no posting privileges.

02-21-2007, 11:12 PM	#1
Ashley ... Join Date: Jan 2006 Location: Devon, United Kingdom Posts: 1,017	Are your test accounts unsecure? About half an hour ago, I came across a forum that disabled guest searching. For some reason, my attention turned to the login box. I simply typed in the username and password 'test' and bingo - it worked! And I did my search. Then I started to think - there must be other forum admins with test accounts. Now a user account typically can't do more than completley spam your forum <which is quite easy to clean with a click of the magic "delete all posts by this user" button>, but if, for example, you were testing moderator/administrator accounts on your forum, and your test account had a simple-to-guess password with mod/admin rights - then some nasty person could wreck havoc on your forum. So, secure those test accounts! Just put a password which isn't easy to guess on them, or simply delete the account when you're done testing. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

02-21-2007, 11:24 PM	#2
demojames Just keeping it real Join Date: Oct 2005 Location: Kent, WA Posts: 2,857	If they were smart I am sure that the test account only has viewing permissions only, no posting privileges. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. - To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Blue Devil Test Mule	Get Shorty	Off Topic	2	11-18-2006 04:52 AM
Internet Addiction Test (IAT)	Ryan	Off Topic	17	01-18-2006 05:18 PM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)