PCI Scan issue:- Encrypt the username/password
-
Scan Results THREAT: The Web server uses plain-text form based authentication. A web page exists on the target host which uses an HTML login form. This data is sent from the client to the server in plain-text SOLUTION: Please contact the vendor of the hardware/software for a possible fix for the issue. For custom applications, ensure that data sent via HTML login forms is encrypted before being sent from the client to the host. RESUL T : GET /cgi-bin/admin.php3?admin=YmxhYmxhOg%3D%3D&op=mod_authors HTTP/1.1 Host: www.xyz.com Connection: Keep-Alive <form class="woocommerce-form woocommerce-form-login login" method="post">We just ran a PCI test and this came out as recommendation.
how can we encrypt the logins on woocommerce form?
surprisingly, i never heard of this in my one decade of working with woocommerce. google doesnt work or provide a useful result
Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
The topic ‘PCI Scan issue:- Encrypt the username/password’ is closed to new replies.