Solved Web console allows login without password

Discussion in '3CX Phone System - General' started by Helmut72, Sep 4, 2017.

Thread Status:
Not open for further replies.
  1. Helmut72

    Joined:
    Aug 24, 2017
    Messages:
    13
    Likes Received:
    0
    Hello,

    as the subject says, I can log in to the webconsole (https://3cx.mydomain:5001) without logging in as admin. I'm not asked for a user/pass at all. Why?

    Thank you!
     
  2. agp

    agp 3CX Team

    Joined:
    Aug 19, 2015
    Messages:
    140
    Likes Received:
    21
    Hi @Helmut72 ,

    That means your haven't logged out from your previous session and it hasn't expired yet. If you logout you will then be asked to login to access the dashboard.
     
  3. Helmut72

    Joined:
    Aug 24, 2017
    Messages:
    13
    Likes Received:
    0
    The last time I was logged in was a few hoers ago. I shut down the PC also. How can I manually close the session, how can I check what account I'm logged in currently:
     
  4. agp

    agp 3CX Team

    Joined:
    Aug 19, 2015
    Messages:
    140
    Likes Received:
    21
    The easiest and recommended way to logout is via the logout link:

    3cx_Logout.jpg


    On the top right section there's the user account menu. It will show the Initials of the logged in user. For example A stands for Admin. If you were logged in with an extension under the name "Demo User" it would say DU.
     
  5. Helmut72

    Joined:
    Aug 24, 2017
    Messages:
    13
    Likes Received:
    0
    Thank you. Admin was logged in without prompt. I logged out manually and now I'm asked for a login again. Still a bit concernend. :)
     
  6. agp

    agp 3CX Team

    Joined:
    Aug 19, 2015
    Messages:
    140
    Likes Received:
    21
    You shouldn't be :) If you logout before you close the browser/computer there is no way you will be logged in as admin the next time you open the Management Console.

    Alternatively you can use an incognito window which will automatically delete your cookies after you close it.
     
    craigreilly likes this.
  7. Helmut72

    Joined:
    Aug 24, 2017
    Messages:
    13
    Likes Received:
    0
    Correct. But leaving a session valid for hours is still something the concerns me. I closed the browser yesterday without logging off and re-opened it more than 12h later again. No password prompt. Imagine this with your online banking session. :eek:
     
  8. giwm

    giwm New Member

    Joined:
    Sep 27, 2016
    Messages:
    236
    Likes Received:
    41
    @Helmut72 It just uses cookies like any other online service. Set your browser to delete your cookies on close if you don't want to logout every time. Granted, it may not be a bad idea to allow users to set a timeout period from within 3CX, but you should post in the Ideas forum if you'd like to see that as a feature.
     
    YiannisH_3CX likes this.
Thread Status:
Not open for further replies.