This repository has been archived by the owner on Apr 8, 2023. It is now read-only.

Default password is changeme #83

Open

jfm-so opened this issue Aug 2, 2018 · 1 comment

Owner

jfm-so commented

Change the default password from changeme. A possible solution is to give admin rights to the first registered account.

auscash commented

Generate the hash from a user-chosen password for the default. This can lock down and should whitelist the administrator in some way.

Disallow logins with the administrator account unless they browse there from localhost, for example, or lock down with an IP of the administrator.

Then continue using something better than md5.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.