From 9614845e32ed088284e00f8b8a0a2e1c0add884e Mon Sep 17 00:00:00 2001
From: Dean Camera <dean@fourwalledcubicle.com>
Date: Sun, 31 Jul 2016 23:55:33 +1000
Subject: [PATCH] Add warning to the MPC-HC media_player component
 documentation. (#708)

---
 source/_components/media_player.mpchc.markdown | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/source/_components/media_player.mpchc.markdown b/source/_components/media_player.mpchc.markdown
index 6e06b454d14..76c7e443954 100644
--- a/source/_components/media_player.mpchc.markdown
+++ b/source/_components/media_player.mpchc.markdown
@@ -22,6 +22,12 @@ For this component to function, you will need to enable the Web Interface in the
   <img src='{{site_root}}/images/screenshots/mpc-hc.png' />
 </p>
 
+If the server running Home Assistant is not the same device that is running MPC-HC, you will need to ensure that the *allow access from localhost only* option is not set.
+
+<p class='note warning'>
+The MPC-HC web interface is highly insecure, and allows remote clients full player control file-system access without authentication. Never allow access to the Web UI from outside of your trusted network, and if possible [use a proxy script to restrict control or redact sensitive information](https://github.com/abcminiuser/mpc-hc-webui-proxy).
+</p>
+
 To add MPC-HC to your installation, add the following to your `configuration.yaml` file:
 
 ```yaml