When I'm in File Manager of Webmin, I can double click and see the codes of the files in a new tab in Firefox with its specific URL.
But when I remove ?rand=xxxx...
after the file.php
and paste the URL in Chrome browser, I still can see the codes.
This is the URL I just pasted in the Chrome browser
http://xxx.xxx.xxx.xxx:10000/file/show.cgi/var/www/html/mysite.com/files/file.php
And then I logout of webmin and I change the file.php
with other file, I can see the codes.
Is Webmin safe? How do I secure it?
working with a service provider's management interface, such as cPanel
.