Quote:
Originally Posted by Shoplifter
Check your server logs to see what IP is calling the CGI to add users. If it is not a CCBill IP then secure it. If it is a CCBill IP then continue raging.
|
Good advice.
A few years ago we noticed more "paid" user accounts than we could account for, and it turned out to to be a hacker. Someone was posting fake purchase data to our post-back script that had the same format as CCBill's, but were coming from the wrong location.
What we did was first lock it down so that it would only allow messages from verified CCBill servers. We then took a couple of extra steps to make sure each new purchase and each cancel was correct, and to validate the format of the data received. This solved our problem.
AVSTgp: In my opinion posting on a forum about this kind of thing is a mistake. If you weren't getting good support from a CCBill tech, you should have escalated it to your sales rep, or contacted Corvette by ICQ. Corvette and Paul have always been great at solving any problem or answering any question we had. No need for public "drama".
Good luck!