ccbill program masters can see affiliate passwords? - GoFuckYourself.com

rowan · 08-17-2005, 10:52 AM

One program migrating from ccbill to their own stats has my ccbill username, ID and password as the login to their new stats db... so it appears they have access to this information.

Does anyone else see anything wrong with this? Of course they would need my main affiliate ID to be able to actually login to ccbill, but for some affiliates this may not be too hard to find...

Mr. Mike · 08-17-2005, 11:00 AM

They do not have your password. You dont need a password to integrate stats into your own domain.

They can see details of your stats from the ccbill admin anyway. They cant access any sensitive info.

rowan · 08-17-2005, 11:19 AM

Quote:

Originally Posted by Mr. Mike

They do not have your password. You dont need a password to integrate stats into your own domain.

They do have my password. This is the first time I had logged into the new system, did retrieve password (since I had no idea what they had assigned) and was quite surprised to see my ccbill password emailed to me.

This was NOT via ccbill, it is their own stats interface.

Mr. Mike · 08-17-2005, 11:27 AM

Quote:

Originally Posted by rowan

They do have my password. This is the first time I had logged into the new system, did retrieve password (since I had no idea what they had assigned) and was quite surprised to see my ccbill password emailed to me.

This was NOT via ccbill, it is their own stats interface.

DUDE. there is something called POSTBACK. I dont feel like explaining it, but you can virtually do everything ccbill does on your own domain, incluiding email templates etc... CBILL scripts do NOT passback any sensitive info. Just like cascading, you can collect everything but the credit card details.

they dont have your password.

This is a copy from a new affilate signup confirmation:

Password: Not disclosed

Dalai lama · 08-17-2005, 11:28 AM

They dont have it / cant see it

rowan · 08-17-2005, 11:30 AM

Quote:

Originally Posted by Mr. Mike

DUDE. there is something called POSTBACK. I dont feel like explaining it, but you can virtually do everything ccbill does on your own domain, incluiding email templates etc... CBILL scripts do NOT passback any sensitive info. Just like cascading, you can collect everything but the credit card details.

they dont have your password.

The retrieve password email originated from their servers, not ccbill. I'll leave it at that since you're just going to tell me I'm wrong again.

Mr. Mike · 08-17-2005, 11:35 AM

Quote:

Originally Posted by rowan

The retrieve password email originated from their servers, not ccbill. I'll leave it at that since you're just going to tell me I'm wrong again.

Well, my point isnt to tell you youre wrong, my point is to explain to you how the system works.

Yes, you can Submit a password retreval form from MY site, and I can send you the CCBILL password. It doesnt mean I have it, just means that the form is linked to CCBILL servers and postback function allows for the email to be sent from my email address.

If you dont believe me just call them at 800 510-2859, and they will explain it to you.

This is why CCBILL is the best, because its incredibly customizable. The only way anyone else would have your password is if you gave it to them.

CCBill Paul · 08-17-2005, 11:39 AM

Rowan,

It is against CCBill policy to give out any affiliate information to a sponsor that the sponsor does not already have access to. Hit me up if you would like to discuss this further.

i c q 248615940
paulk at ccbill dot com

-Paul

rowan · 08-17-2005, 11:41 AM

Quote:

Originally Posted by Mr. Mike

Yes, you can Submit a password retreval form from MY site, and I can send you the CCBILL password. It doesnt mean I have it, just means that the form is linked to CCBILL servers and postback function allows for the email to be sent from my email address.

The email originated from the program's servers, not just the email address. I checked the headers and it did not come from ccbill.

Their account update page also shows my password - again, it's on their domain and it's in clear text.

I have emailed the webmaster asking for more info on how he migrated the affiliate data.

Mr. Mike · 08-17-2005, 11:45 AM

Quote:

Originally Posted by rowan

The email originated from the program's servers, not just the email address. I checked the headers and it did not come from ccbill.

Their account update page also shows my password - again, it's on their domain and it's in clear text.

I have emailed the webmaster asking for more info on how he migrated the affiliate data.

Dude now youre just stirring shit up. If you refuse to read well then now youre on your own. You need to call CCBILL about this anyway.

They dont have your damned password. The program will not tell you HOW they integrated, this is something poeple pay programmers to do.

CALL CCBILL

08-17-2005, 10:52 AM	#1
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	ccbill program masters can see affiliate passwords? One program migrating from ccbill to their own stats has my ccbill username, ID and password as the login to their new stats db... so it appears they have access to this information. Does anyone else see anything wrong with this? Of course they would need my main affiliate ID to be able to actually login to ccbill, but for some affiliates this may not be too hard to find...

08-17-2005, 11:28 AM	#5
Dalai lama Strength and Honor Join Date: Jul 2004 Location: Europe Posts: 16,540	They dont have it / cant see it __________________ A program you can trust. Gallerybooster Run multiply TGPs of 1 script

08-17-2005, 11:39 AM	#8
CCBill Paul Confirmed User Industry Role: Join Date: Feb 2004 Location: Cardinal Nation Posts: 1,005	Rowan, It is against CCBill policy to give out any affiliate information to a sponsor that the sponsor does not already have access to. Hit me up if you would like to discuss this further. i c q 248615940 paulk at ccbill dot com -Paul __________________ Paulk @ CCBill.com \| icq 248615940

08-17-2005, 11:00 AM	#2
Mr. Mike Confirmed User Join Date: Aug 2004 Posts: 913	They do not have your password. You dont need a password to integrate stats into your own domain. They can see details of your stats from the ccbill admin anyway. They cant access any sensitive info.