November 5, 20205 yr This morning I booted up and went to login on my unraid page dashboard. The dashboard popped up without verifying any credentials! I closed the browser and reopened it, and then it finally asked for credentials/login. Then I went to my phone browser to verify and the same thing happened. This is obviously very disconcerting. While I don't have access on from outside my network/LAN, it is still a huge security risk if a virus tries to gain access to a PW protected share. Edited November 5, 20205 yr by Don H
November 7, 20205 yr The session lifetime for the webgui is 7 days, pretty sure it has been set this way ever since form-based authentication was added. This has no bearing on whether a virus can access files over SMB
Archived
This topic is now archived and is closed to further replies.