Make the Password requests in WHMCS Admin Area optional in Options.
WHMCS requests admin Password on areas like: configgeneral.php
Usability is = 0
Think about it and make optional.
That think does not improve the security overall!
Merged Ideas
Remove WHMCS V7.1.x Settings Password
In your new Update, WHMCS ask´s for Password when i want open the Settings.WHMCS is already secured over an Firewall, over htaccess Rules and so on.This additional security level really disturbs!Think about an option to disable this in WHMCS-Settings.
Featured Comment
Thanks for submitting this feature request. I can assure you that we are very interested in customer feedback and suggestions, they form one of the main ways in which we plan the future road-map of the software. However due to the number of requests we receive (sometimes conflicting) it isn't possible to implement every idea.
I'd like to take a moment to explain a little about why this additional password check was implemented within the admin area, and why we do not intend to remove it. Even if you still don't agree with our decision, hopefully it will at-least make the reasons for implementing it clearer.
Adding the password prompt when accessing system setting pages introduces a check and balance which delineates between using the admin area in a day-to-day way and the occasional actions of changing configurations. It also adds a level of proactive prevention against theoretical privilege elevation attacks, and a staff member accidentally leaving an active admin session on a publicly accessible computer. Security is always our top priority.
The obtrusiveness of the admin password prompt is reduced by:
I trust you find that explanation insightful. Thanks for your continued custom and please do keep suggesting and voting on other ideas!