Page 1 of 1

Purpose of myVesta secret URL

Posted: Thu Dec 31, 2020 10:38 pm
by myVesta
Idea of secret-url is to protect you from (hypothetical) zero-day security vulnerabilities.
For example, someone discover security vulnerability in Vesta php script, makes bot that will scan all IP rangs, find all Vesta servers, and makes massive hack of all servers.
With secret url, hackers will not find your myVesta server.

If someone find security vulnerability we will fix it immediately, so there is no time for your users to hack you, even if they have high hacker skills ;)

It is absolutely safe to give someone your secret URL, it's just a link that will open login form of myVesta.
He can not hack you with that URL.
With secret url, he will just be able to load login form of myVesta.

Re: Purpose of myVesta secret URL

Posted: Sat Feb 06, 2021 6:06 pm
by Mike_Tester
That's great security feature.

Re: Purpose of myVesta secret URL

Posted: Mon Apr 12, 2021 4:36 am
by T4B
Image

Re: Purpose of myVesta secret URL

Posted: Fri May 21, 2021 6:46 pm
by gatto
is a great security feature but i am not shure why but it constantly asks me for my credentials, every time I go to do something I get the login form and I have to log in again. More than sure it becomes overwhelming.

Re: Purpose of myVesta secret URL

Posted: Fri May 21, 2021 9:53 pm
by T4B
gatto wrote: Fri May 21, 2021 6:46 pm is a great security feature but i am not shure why but it constantly asks me for my credentials, every time I go to do something I get the login form and I have to log in again. More than sure it becomes overwhelming.
yeah same

Re: Purpose of myVesta secret URL

Posted: Tue May 25, 2021 10:45 am
by myVesta
gatto wrote: Fri May 21, 2021 6:46 pm is a great security feature but i am not shure why but it constantly asks me for my credentials, every time I go to do something I get the login form and I have to log in again. More than sure it becomes overwhelming.
Where do you exactly go?
Can you make video of this?

Re: Purpose of myVesta secret URL

Posted: Thu May 27, 2021 8:01 pm
by gatto
for example:
go https://vesta.mysite:8083/?myhideurl and login, go to Web section and resturn login page, again user/pass-login.
Not happen always, is like random or inactive time. Sometime the login prompt several times.

Re: Purpose of myVesta secret URL

Posted: Thu May 27, 2021 8:07 pm
by myVesta
Maybe your IP is changing... maybe you switched to VPN... or changed ISP...