Why can't ccbill batch change logins!! Stupid!
 

So what do you do if a pirate gets a hold of your password file? What if that pirate now has a whole list of usernames. Ok so you clear out a few when he posts your content, but he still has hundreds more to last him his whole life.

Now I don't need an answer on other ways of doing it so please don't post it. We already know.

What I want to know is why the hell CCbill doesn't have an option in the admin to change all usernames in batch for an individual account. It seems fairly simple and straight forward! Not just that but this would be a great tool for webmasters to fight theft.

I have spent some time with ccbill support and they say the only way to do it is by going in to each account manually to change logins. YEA RIGHT!!!! Come on people let's get our shit together. With the amount of money ccbill makes and the % they take from us, is such a simple tool asking too much?

This pisses me off. Not just that but apparently their encryption method for passwords can be cracked by a first grader. Awesome protection YAY! No wonder people have been stealing our shit week after week.

Sorry to vent but my dog doesn't understand this shit.

Did you just approach them with your issue that one time?
and that made you rant that here..good luck..:helpme

I approached them about this actually a bunch of times and each time they gave me the same solution......click on each account to change them manually. The tech also said "I understand your concern I will forward this to our programmers" The programmer wrote back "you will need to manually add them on the WebAdmin side as well as update your password file"

A better answer would have been HEY we don't have that available yet, but you're right THAT IS A GOOD IDEA to have that available to our clients since it CAN be VERY useful. We will find a better solution for you.

You gotta stop making such hot content.... just sayin.

LOL If only that would actually work :)

Sounds like a problem that should be addressed by CCBill.

One of the reasons I posted here. It seems that me simply bitching to them about it does nothing. Maybe someone with more power can step in here to help figure this out.

I also wanted to see if you guys felt the same about this, as far as being able to change all logins if you needed to in one automated shot. NOT MANUALLY!!!!

What if I'm a site with 9000 users??? I have to changed each log in manually!?? If that's the case you'd better not charge me 15%! If that's the case and you can't figure out how to write a simple script that will do this for those of us who use you, than YOU go in and change the logins FOR me!

We did figure out another solution to doing it, however now the problem is, is that the file no longer matches what ccbill has in the admin. So if I need them to rebuild my pass files, we're fucked again! So guess what ccbill's reply to that issue is....... NOW I HAVE TO GO IN AND MANUALLY UPDATE EACH ACCOUNT WITH THE NEW LOGINS!!!!!!!!!!!!!!!!

So essentially they can't do a reverse datalink kind of thing and just update all the accounts with the new logins we created via our script. That's too much work for them.

And meanwhile we all sit here and bitch about people pirating our stuff, but meanwhile the people who are supposed to be protecting us, won't even help us!

That's pretty cool. When someone farts and posts about it, 95 people reply. When there is a legitimate issue, no one has any thoughts......

Well, they hacked your password file. Not theirs, didn't they? So in the end it's your (or your server admin's) job to secure the server.

You can't blame them if something goes wrong on your end and they do not provide the tools to fix it within seconds.

I wasn't blaming them for what happened or how it happened. Please read again to see my beef.

Your answer doesn't even make sense. Listen to what you said.... "You can't blame them if something goes wrong on your end and they do not provide the tools to fix it within seconds."

That's exactly my point! THEY SHOULD HAVE THE TOOLS NECESSARY TO FIX SOMETHING IN CASE IT DOES GO WRONG! THEY MANAGE MY ACCOUNTS AND USERNAMES! Why wouldn't you have this as a tool? They sure as hell should have a way of doing this EASILY. Things like this happen every day, and if you run a paysite, you know all about it. If ccbill doesn't allow me the tools necessary to alter the accounts IN THEIR ADMIN. Then what?

sorry man :(

erm. your password file should be secure, no?

so even if they did get the file. they shouldn't be able to do too very much with it, provided that users aren't using incredibly weak passwords.

Actually that's the problem. Which is something that most people aren't even aware of. The passwords seems to be encrypted on the ccbill file. So at first glance your file seems useless to anyone. However, this encryption method that they use is fairly simple to crack. I had Ray Morris look at the file and he told me he was able to figure out something like 62 passwords in less than 1hr. So if someone gets a hold of that file, they can easily crack a huge list of usernames.

CCbill should either bulk up their encryption or have a way to batch change logins at any given time. This seems like BS to me from a company that is so huge and taking huge %s from all of us.

people still use htaccess for security? that's so... 2001

Sorry I'm not a tech. What would you suggest?

The real question is why the fuck CCBill makes you have two thousand different affiliate IDs... that's absurd... You should be able to apply new sponsors to the same ID...

It's confusing as hell at first and a serious pain in the ass... as you are now experiencing.

And, why does their affiliate interface look like it hasn't been updated since 1995?

Yup totally agree. I guess they aren't making enough money to update the admin. I mean, it's not like the admin is important or anything. I'm starting to think that ccbill likes to just sit back and watch the $$$ roll in without having to provide proper customer care. The fact alone that no one from ccbill has replied to this thread shows just how concerned they are when we the paying clients, actually have some kind of issue. I'm surprised that I don't have to manually activate accounts when someone joins the site at this point.

I don't remember but like a year or two ago they said they would be updating their admin area. What happened to that? I never saw any changes. Same old confusing crappy interface.

If this is how ccbill is going to treat clients when they NEED their help, to basically tell me to do it myself, than I think it's time to look for another processor/ solution.

Hello, I sent you an icq message earlier and have not received a reply.

We have a tool that will help you change your customers usernames and passwords however we do not have a tool that will modify the logins and email all of the new ones to your customers. Quick frankly the need to develop such a tool has not existed until now. We take every request seriously and if one client needs such a tool we will look into developement and see if we can accommodate the request. Sometimes it is just not feasible to do so.

I would be happy to help if you would like to hit me up or leave me some contact info for you.

Paul thank you for replying to my thread! I appreciate any help you can provide here. I wish the techs from ccbill would have worked a little closer with me on solving this issue before I actually had to go and post here about it. I tried several times and each time I got a DYI answer.

The fact is that with pirating and tubes becoming more of a problem it is time to start protecting our content better in the first place. Doing so sometimes requires you to change the passwords, ALL passwords at once. I would do this every two to three months if you guys gave me the ability to. This way, we no longer have to worry about password leaks, etc. Customers will keep the same login for years if it's left up to them. And that's where problems come in. So yes, this WOULD be a very powerful tool in fighting this, so I do hope you guys can accommodate. This would be beneficial to ALL webmasters who use you guys that fall victim to weekly site theft.

I was out shooting all day and just got back so I missed your ICQ. I hope I can still catch you. If not maybe we can figure it out by email?

I would also like to keep everyone updated on the progress in this thread only because like I said, I know tons of sites who use ccbill that I can literally find each and every update they do week after week on these pirating forums, that would benefit from doing this every so often.

A girl who knows what she's talking about...I like! lol

And no kidding, I'd love to a full ccBill upgrade. It's way beyond dated.

Just a little update here. We finally had a chance to contact Paul. Just sent the email out now. Hoping Paul can help us out.

Will let you guys know the outcome.

Paul we emailed you a few days ago now without reply. Can you please check your emails and get back to us?????

Damn, sorry to hear that, I can't believe they don't have that very simple yet so useful feature... Then again, CCBill is running on some slow back-end from the early 90's so I wouldn't expect much to begin with.

To update....no one has replied to me STILL !!!!! Thumbs up!!!!

Glad to see I'm not the only one who thinks this would be extremely useful.