Hello all, how’s your Christmas? :)
Today, just like another ordinary days. Bernita told me that she was sick. Well, get well soon mbak. I added some more pages on this site — take a look at the top navigation, there are some new links there. Nothing special, just rebuilding my past contents.
Few days ago, I visited a site ( I don’t think I will not mention the site here –yet). I found many “stupid” (bugs?) on the site. First, I can login into the guestbook administrative area (because, the default password was not changed, and the site already published). The next thing, I can login into the news admin (because, it uses WordPress, a blogtool I’ve used it for more than a year (b2 and WordPress)). How come? First, the login page is always be b2login.php, after the main site, right? And about the password, I just guessed, and… viola, I can enter the admin page (with level 10 of course). :(
The third one, I can login into the email. And also, I just guessed the password. It uses the default address for the webmail login (many webhost use this, right?), /webmail or using port 2095, mine too.
But, I did nothing. I just replace the passwords, and notify the site owner about this. I hope the site owner, and the site admin will change those password into something “unique” and “not-easy-guessed”. I hope. I just think, that it won’t be funny if the site is defaced or hacked just because the password problem.
I had a good news. My client from Jambi had sent the payment. :) So, I have to fix the site soon. The programming is 95% finished, now, it is my turn to make the final layout. Yes, it will be tableless. May be, you’ll laugh at me about the tableless layout. :) But me, what’s wrong with tableless layout?
Categories