Q: How can somone make a ccbill account?

**VIXEN ESCORTS** · 07-30-2012, 05:33 AM

Can you post the usernames and passwords and I'll check it out for you.

**CHMOD** · 07-30-2012, 06:11 AM

Originally posted by DVTimes

How can somone have a mebers account without joining your ccbill site?

I have phantomfrog so it blocked this missuse.

But NO ONE has signed up with these details, yet they have ccbill accounts.

These were removed a few days ago:

sp117535a0505
sp117537a0505
sp117534a0505
sp117536a0505
sp117539a0505
sp117538a0506

If you have a custom username/password management script, there may be a security leak.

**alf6300** · 07-30-2012, 06:41 AM

Originally posted by CHMOD

If you have a custom username/password management script, there may be a security leak.

What he said.
First thing I would check is if the users appear also in the CCBill DB (although never paying), or if they are only in your site db (or htpassword file if you are doing it that way)

If the latter, that could be an indication of a security leak on your side of things, not even necessarily related to the CCBill script.

**livexxx** · 07-30-2012, 09:11 AM

Perhaps they are coming from a magic join page?

**KillerK** · 07-30-2012, 09:13 AM

could be sql issue on your login script.

Also if you are using standard ccbill cgi/php scripts that are named something standard they could be exploting that way.

Q: How can somone make a ccbill account?

Q: How can somone make a ccbill account?

Comment

Comment

Comment

Comment

Comment