FTP login details visible in source

  • 1
  • Question
  • Updated 10 years ago
  • Answered
I've discovered that my ftp login username and password are visible, when viewing the source of my synthasite-created website. Has anyone experienced this? Any ideas?
Photo of paulmitchell

paulmitchell

  • 3 Posts
  • 0 Reply Likes
  • anxious

Posted 10 years ago

  • 1
Photo of Peter

Peter

  • 2569 Posts
  • 113 Reply Likes
Hi paul.

Was this a one off or is it ongoing?
Photo of paulmitchell

paulmitchell

  • 3 Posts
  • 0 Reply Likes
I only have one published site created with Synthasite, so I guess it's a one-off. The site is: http://www.pleasegodbyyou.com if you want to have a look. Further down in the source it displays my ftp details.

I contacted support of my hosts, but they said it's the way the site is encoded, i.e. it's not secure.
Photo of Peter

Peter

  • 2569 Posts
  • 113 Reply Likes
OK I see it paul,

It's got to do with the dialogue with the FTP source of an image.. Yep I would agree that it's a big security chink.

It's probably fairly limited by default I'm guessing but there's no doubt is there.

have you sent an email to Yola Support, Paul?
Photo of Emmy

Emmy

  • 5892 Posts
  • 299 Reply Likes
Hello,
I took a look at your source code and what you are seeing ftp wise is that you are using an image that is hosted elsewhere. If you are concerned about security you should upload the file into your File Manager and use it from there.

Hope that helps, let us know if you need further assistance.

Emmy
Photo of paulmitchell

paulmitchell

  • 3 Posts
  • 0 Reply Likes
Hi, thanks for your replies, the images are hosted by PayPal, they're 'buy it now' buttons.

I'll send an email to Yola Support too, altho, I couldn't actually find a 'contact us' link anywhere on the Yola site, just this community support page.
Photo of Peter

Peter

  • 2569 Posts
  • 113 Reply Likes
Paul,

The email is to: support@yola.com