Cidram: Suggestions, security related

[eurobank]

After recently installing a website server with CIDRAM, i would like to make two suggestions.

1. Please remove the "Default user Admin and Default password password" text from login page. No reason to have that.
2. Please think about NOT providing so much and detailed information in a Block page (via the default template). No reason to inform the visitor about script used, signatures etc. Why give so many detaile? A reason for bocking would be enough (and more than enough) i think.

thanks

[Maikuolan]

1. Please remove the "Default user Admin and Default password password" text from login page. No reason to have that.

That's mostly just an aesthetic element of the front-end anyway, so it shouldn't be a problem to remove it. I have been considering overhauling many of themes recently anyway, so I could always just consider removing that text as part of the overhaul, getting rid of it as well as whatever other changes.

1. Please think about NOT providing so much and detailed information in a Block page (via the default template). No reason to inform the visitor about script used, signatures etc. Why give so many detaile? A reason for bocking would be enough (and more than enough) i think.

Planning on adding some nice new options for that with v3, so that'll definitely happen. :-)

(There are a few details to sort out first, but I plan to start working on v3 at some point within the next few months, maybe earlier, depending on how long it takes to sort out those other details first).

The reason for not doing it earlier (v1, v2), is that there are some existing configuration options, which the new ones will supersede and completely replace, and I aim to treat the removal of existing configuration options as a "backwards-incompatible change", warranting a new major version release. But anyway, it shouldn't be too far in the future.

[Maikuolan]

The first of the two suggestions has now been implemented. :-)

[737simpilot]

Just want to add here that if you use the Obscured theme that'll strip out the type of script you're using, i.e. CIDRAM in the block page for the user.