Hello all,
I think there is a problem with the MPWebServices, especially if it is accessible from the Internet:
If you go to "http://mediaportal:81/" with your browser, you must logon with username/password. But this user/password is stored in the file "config.xml", which is accessible with "http://mediaportal:81/config.xml" and without any security check...
(Well, If someone can watch TV is not the big problem. But personal videos/pictures are also available with the MPWebServices ;-) )
I think there is a problem with the MPWebServices, especially if it is accessible from the Internet:
If you go to "http://mediaportal:81/" with your browser, you must logon with username/password. But this user/password is stored in the file "config.xml", which is accessible with "http://mediaportal:81/config.xml" and without any security check...
(Well, If someone can watch TV is not the big problem. But personal videos/pictures are also available with the MPWebServices ;-) )