ccbill design flaw? - GoFuckYourself.com

skinnay · 08-07-2004, 07:04 PM

does anyone else HATE the fact that affiliate programs using ccbill have an ccbill id/username/password form on their site? yeah i know it POSTs it to a ccbill server, but the fact that people are used to entering their information on various sites is just asking for some jackass to make a fake affiliate program to collect ccbill passwords. affiliates should just have an id number they display, and webmasters can then just enter that number into their own ccbill admin panels. that is all.

pornguy · 08-07-2004, 07:13 PM

You should have just passed you thought on to ccbill instead of this thread.

just my

Shoehorn! · 08-07-2004, 07:17 PM

Quote:

Originally posted by skinnay
does anyone else HATE the fact that affiliate programs using ccbill have an ccbill id/username/password form on their site? yeah i know it POSTs it to a ccbill server, but the fact that people are used to entering their information on various sites is just asking for some jackass to make a fake affiliate program to collect ccbill passwords. affiliates should just have an id number they display, and webmasters can then just enter that number into their own ccbill admin panels. that is all.

I have often wondered this same thing. I usually just hit submit first to make sure it takes me to a CCBill page, but I am sure there are still ways to get fucked over and get your accoung hijacked with this.

skinnay · 08-07-2004, 07:45 PM

Quote:

Originally posted by pornguy
You should have just passed you thought on to ccbill instead of this thread.

just my

well it's not really an urgent security matter, but i figured i would pass it on if enough people also had the same feelings.

fr8 · 08-07-2004, 07:47 PM

Well im sure some scammer will pick up on this now that its been posted. Time to start watching your ccbill account(s).

skinnay · 08-07-2004, 07:50 PM

im sorry i always thought this was blatantly obvious

rowan · 08-07-2004, 09:46 PM

I always check the source to make sure it posts to the ccbill site. Some programs actually DO submit via their own site - probably nothing malicious intended, but there's no way I will submit my full ccbill details to a third party site. If I come across such a site I usually email them and let them know why I cannot sign up with them.

I do think it would be better if the signup form was hosted by ccbill.

emthree · 08-07-2004, 09:56 PM

Quote:

Originally posted by rowan
I always check the source to make sure it posts to the ccbill site.

08-07-2004, 07:04 PM	#1
skinnay Confirmed User Join Date: Apr 2004 Location: NEW YORK CITY Posts: 2,274	ccbill design flaw? does anyone else HATE the fact that affiliate programs using ccbill have an ccbill id/username/password form on their site? yeah i know it POSTs it to a ccbill server, but the fact that people are used to entering their information on various sites is just asking for some jackass to make a fake affiliate program to collect ccbill passwords. affiliates should just have an id number they display, and webmasters can then just enter that number into their own ccbill admin panels. that is all. __________________ Make Real Green with ORGANIC SEO \| Blog post exchange \| Non-index page trades \| A-B C-D Trades [icq: 194-215-962] [mail: [email protected]]

08-07-2004, 07:13 PM	#2
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	You should have just passed you thought on to ccbill instead of this thread. just my __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

08-07-2004, 07:47 PM	#5
fr8 Confirmed User Industry Role: Join Date: Mar 2003 Posts: 5,074	Well im sure some scammer will pick up on this now that its been posted. Time to start watching your ccbill account(s). __________________ █ joesmut (a) gmail Dot com █ Full Stack Developer

08-07-2004, 07:50 PM	#6
skinnay Confirmed User Join Date: Apr 2004 Location: NEW YORK CITY Posts: 2,274	im sorry i always thought this was blatantly obvious __________________ Make Real Green with ORGANIC SEO \| Blog post exchange \| Non-index page trades \| A-B C-D Trades [icq: 194-215-962] [mail: [email protected]]

08-07-2004, 09:46 PM	#7
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	I always check the source to make sure it posts to the ccbill site. Some programs actually DO submit via their own site - probably nothing malicious intended, but there's no way I will submit my full ccbill details to a third party site. If I come across such a site I usually email them and let them know why I cannot sign up with them. I do think it would be better if the signup form was hosted by ccbill.