Quote:
Originally Posted by V_RocKs
Not sure if you will come back and read this, but you just showed how much of a newbie you are as a webmaster. Like asshat status and no offense, just stating facts here. But from a security stand point you look like a 3rd grader.
From what you posted it so so fucking blatently obvious what happened that I almost think this post is fake.
it is obvious that the unsuccessful attempts were from crackers trying to get free passwords, they got his and shared it for him most likely in a forum and others came in and used it. It got blocked. He comes in and it don't work and he thinks your are some kind of asshat and charges back.
That is what surfers do now. If the experience goes south, insta-charge back. No hesitation.
|
considering Carlos told me you're a nice guy in person i don't get the personal insults here - but so be it...
and yes, i am a newbie webmaster - that's why i come here. to ask and learn. and to get insulted - obviously
Quote:
Originally Posted by dgraves
this would be my guess too. this is common and i bet he had a simple login. the htpasswd file isn't that hard to get and once they have the usernames they run a script to match up possible passwords.
when this happens i reset the username and password to a more complex one. if it happenes again he's what i consider an "undesirable customer" and i keep him blocked.
|
and to both of you: we use 16 digit random usernames and passwords and the login attempts from various IPs and countries started right after the sign up. so your guesses are wrong.
also the "member" has not made any attempt to get in touch and ask why his password doesn't work anymore.
but i have learned from this thread to proactively contact the person next time with a new password and if it then happens again to ban him.
so thanks to those of you who made helpful contributions to this thread