View Single Post
Old 07-11-2002, 09:29 AM  
SeanE
Confirmed User
 
Join Date: Nov 2001
Posts: 357
I guess I am going to have to stop lurking so I can post on this issue. ;-)

In trying to account for all possible sign-up scenarios, CCBill determined
that is was important to "reserve" a username once it was entered, but prior
to confirmation. This was done to prevent multiple sign-ups with the same
user name occurring simultaneously. This feature was "added" to the new
custom forms only. This did not affect any client using our older sign-up
systems.

Unfortunately, as we were upgrading another portion of our systems last
night, this feature began to insert the customer supplied username and
password into the database. As a fail safe, we have always had a cron
running every 30 - 60 minutes to eliminate or update username and password
data, and therefore, consumers who discovered this error were only able to
gain access for a limited period of time. This error is currently being
fixed.

Again, we would like to stress that only clients utilizing our new custom
form system may have been affected and, even in that case, it should only be
those who utilize confirmation pages. If any client affected by this issue
needs to speak to me directly, please contact me here at CCBill

Sean Eggert
CCBill Account Rep.
888-906-0666 ext. 158
84769138 icq
SeanE is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote