Closed utdream closed 9 years ago
username and password screens for Tomcat/Railo administrators have been split and the english text has been updated in Railo 4.1.011 RC
Update to this. Mark has suggested that the Tomcat applications be removed completely to help avoid confusion between the tomcat applications and the Railo applications. It will also help reduce the number of attack vectors available on a default install.
Without the Tomcat Applications, there's no need to have a Tomcat Username and password added at all, so these screens can be completely changed.
This was implemented a while ago. Must've forgotten to close it?
The Tomcat Password Screen needs to say that the password provided there is ALSO used for the Railo Administrators by default.
Requested by Mark Drew: "The screen for the admin username and password should say that this is ALSO the Railo password, I guess this would be MUCH more important than saying it is the tomcat password (it should say it is also that)"