This repository was archived by the owner on Jan 10, 2019. It is now read-only.
There is a ulnerability that User credentials are sent in clear text(admin/index.php) #58
Description
Steps to Reproduce
1、the backstage address
http://127.0.0.1/DiliCMS-develop-3.x/admin/index.php
2、login and use BurpSuite to intercepte packets，and then we can see the User credentials are transmitted over an unencrypted channel
