CCBILL and possible bug in affiliateadmin logon
 

I was going to lodge a possible bug with CCBILL and their login page affiliateadmin but wanted to check if it was happening to anyone else first;

Basically when I login to affiliate admin site with my id, username and password it lets me login with only the first 8 characters of my password.

eg. if my password was password69 it lets me in with password

it also lets me in if I type password12 or anything else for that matter, i.e. it doesnt seem to register anything after the first 8 chars. I havn't been game to test it too much encase they have an auto lockout feature.

Anyone else with a password > then 8 chars get able to get in with using only the first 8 chars or using anything else after first 8?

i use password12 as a password for this nick

was saying that really worth an extra post against your name?

Just tried it, you're right! It does. Pretty shoddy.

hmm.. I'll send the bug report to them.. wonder if its something that only happened in a recent upgrade or if it has always been like that.

For all those wanting a pic in this thread;
http://i8.tinypic.com/5y1p3zp.jpg

I actually done that on a few other sites.. bank sites.. wondering if that can be a windows user/pass saver thing..

im not to smart right now..

well check this out, if we need an example, well contact you, thanks

That works for most sites that don't use Strongbox. try it on your own site.
It's due to the very old outdated encryption that most of you are using.
See:
http://bettercgi.com/strongbox/passgen/