Magento has a built in frontend rss feed for customer orders via /rss/sales/orders that is blocked via page auth which seems open to brute force attacks?

Also if I was to use the same function for access via frontend to fetch other system data ( customers list etc)

Is this good practice to have frontend single login access for this output given that the magento latform has this type as default?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.