Jump to content

Recommended Posts

Posted

I've been thrown a brochure for Frogteacher.

 

Iv'e read the other posts concerning the security issues that have arisen but was wondering if anyone here has it installed or looked at it in more depth.

 

Any comments?

Posted

Yep ... I had quite a long chat with one of the MDs and more recently with another one ...

 

The security issues is ... if you don't set it up properly, according to the guidelines given ... then people can access pages with 'public' permissions that are only hidden out of the way due to you not having permissions to see the menu.

 

The security problem was highlighted because, allegedly (court case still to happen), a former students of a school repeatedly tried different accounts and passwords to get in ... managed to get a working account ... and then posted one of the 'public' permission pages that he could view via a staff account.

 

FrogTrade have changed the defaut settings on most installations now and have made sure that existing customers are aware of what they *should* do ...

 

HTH

Posted
Pass ... we don't use it here ... I only got involved as a middleman getting informationout to people after the "hacking" stuff that was getting posted to uk.education.schools-it.
Posted
We have just this morning had a teacher looking at the site. Know this as our proxy server blocked the site and i had to allow access to it for her. Apart from that i don't know didley about it.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...