choppedcode / sso-whmcs

Single Sign On WHMCS client
10 stars 14 forks source link

SECURITY ISSUE #1

Closed gjrowe closed 10 years ago

gjrowe commented 10 years ago

SECURITY ISSUE If you don't enter in your URL, the script will default to an external URL and send your credentials to that external URL.

choppedcode commented 10 years ago

Indeed that's a SSO server that can be used if you don't want to use your own and install your own SSO server. Useful for testing but of course in a live situation, best to install your own version of the SSO server software.