Printable View
Greetings all,
I am a software engineering supporting an install of WebCT on our campus. I'm looking for any good sites that might list any WebCT exploits or if you know of any to help harden our box and keep the system running smooth. Thanks for any info you may have!
I really hope your not trying to hack WebCT, i am a current student on that program. :D I wish they allowed you to use a stronger password on there, the one they make you use about pathetic. :(
Umm... they don't make you use anything. We also make use of WebCT at my college. Our login is our student number and our default password was also our student number, however as soon as we logged in we had the option of changing the password, which we all did. Mine was 8 character alpha-numeric, upper and lowercase. For something like WebCT I'd think that was more than secure enough.Quote:
Originally posted here by FrameWork
I really hope your not trying to hack WebCT, i am a current student on that program. :D I wish they allowed you to use a stronger password on there, the one they make you use about pathetic. :(
Hmm.. I will look into that, i havent seen anywhere in WebCT that allows me to customize my password.Quote:
Umm... they don't make you use anything. We also make use of WebCT at my college. Our login is our student number and our default password was also our student number, however as soon as we logged in we had the option of changing the password, which we all did. Mine was 8 character alpha-numeric, upper and lowercase. For something like WebCT I'd think that was more than secure enough.
Edit: Nope, you're right HT, i just wasnt looking hard enough. It's my first week using WebCT. :p
I'm glad you mentioned that.
No, I'm not trying to hack it, trying to beef it up as much as possible. I had enough of a nightmare integrating the user accounts and courses with our data warehouse that the last thing I need now is for some person to decide to get crash happy and try to bring the system down or get into other people's accounts. Our server manager does a good enough job at locking down the box with restricted IPs to anything other than the web port and I think a couple others, but I was looking into any potentials with exploiting the (IMHO) lousy programming behind the scenes to get into things or bug out the system.
In regards to passwords, that depends on the administrator's settings after the initial login. We make it a minimum of 8 characters and then its kind of in their hands on how "smart" to make the password. Thanks for the link by the way, I'm looking into some resources off that now.