I can view user answers with a debugger

[Chris]

Q: When I use the help desk verification process within arc to attempt to verify a user's answers prior to resetting their password, if I attach a website debugger, I can view the user's verification answers before I have even typed anything in. Is this expected?

A: A condition was identified in ARC 5.01 where loading the helpdesk user verification page after choosing a user to verify can cause the user's answers to be visible to a debugger. Please download the following file, extract the included ASP pages, and replace them in the ARCWeb installation path, typically "%programfiles%\arcweb\www", and choose to overwrite any files.

http://ftp.liebsoft.com/arc/arcweb501fix.zip

These changes will be included in versions of ARC Web released after version 5.01.