Common sense, which should be the first line of defence and security, is what I often notice a dearth of. Way back when, I posted a guide for extended WHMCS login tracking, two people actually PM'd me (unprompted mind, and out of the blue) with the root login credentials of the boxes they were...