ccbill program masters can see affiliate passwords?
 

One program migrating from ccbill to their own stats has my ccbill username, ID and password as the login to their new stats db... so it appears they have access to this information.

Does anyone else see anything wrong with this? Of course they would need my main affiliate ID to be able to actually login to ccbill, but for some affiliates this may not be too hard to find...

They do not have your password. You dont need a password to integrate stats into your own domain.

They can see details of your stats from the ccbill admin anyway. They cant access any sensitive info.

They do have my password. This is the first time I had logged into the new system, did retrieve password (since I had no idea what they had assigned) and was quite surprised to see my ccbill password emailed to me.

This was NOT via ccbill, it is their own stats interface.

DUDE. there is something called POSTBACK. I dont feel like explaining it, but you can virtually do everything ccbill does on your own domain, incluiding email templates etc... CBILL scripts do NOT passback any sensitive info. Just like cascading, you can collect everything but the credit card details.

they dont have your password.

This is a copy from a new affilate signup confirmation:

Password: Not disclosed

They dont have it / cant see it

The retrieve password email originated from their servers, not ccbill. I'll leave it at that since you're just going to tell me I'm wrong again. :)

Well, my point isnt to tell you youre wrong, my point is to explain to you how the system works.

Yes, you can Submit a password retreval form from MY site, and I can send you the CCBILL password. It doesnt mean I have it, just means that the form is linked to CCBILL servers and postback function allows for the email to be sent from my email address.

If you dont believe me just call them at 800 510-2859, and they will explain it to you.

This is why CCBILL is the best, because its incredibly customizable. The only way anyone else would have your password is if you gave it to them.

Rowan,

It is against CCBill policy to give out any affiliate information to a sponsor that the sponsor does not already have access to. Hit me up if you would like to discuss this further.

i c q 248615940
paulk at ccbill dot com

-Paul

:)

The email originated from the program's servers, not just the email address. I checked the headers and it did not come from ccbill.

Their account update page also shows my password - again, it's on their domain and it's in clear text.

I have emailed the webmaster asking for more info on how he migrated the affiliate data.

Dude now youre just stirring shit up. If you refuse to read well then now youre on your own. You need to call CCBILL about this anyway.

They dont have your damned password. The program will not tell you HOW they integrated, this is something poeple pay programmers to do.

CALL CCBILL