Random forced browsing shows unregistered copy/guest account
Posted: Mon Mar 16, 2026 6:50 pm
Browsing to a random page does not return a 404 as expected.
Ex: https://demo.wftpserver.com/what/what
This URL returns HTTP 200 with the contents of index.html and eventually sends the user to https://demo.wftpserver.com/what/logout.html (404)
Ex: https://demo.wftpserver.com/what/what
This URL returns HTTP 200 with the contents of index.html and eventually sends the user to https://demo.wftpserver.com/what/logout.html (404)