Massive security breach

[Anbar]

customers inputting personal details into the system when making accounts are being shown the previous users details.

what sort of half-arsed system is this CCP?

fix required, immediately.

[Dave]

There are only 2 ways that could happen and neither of them is the fault of CCP nor can CCP do anything about it.

1. A shared computer that is not having cookies cleared after a person is done using it.

2. Hard coded links on the site that include a sid= value.

[Anbar]

There are only 2 ways that could happen and neither of them is the fault of CCP nor can CCP do anything about it.

1. A shared computer that is not having cookies cleared after a person is done using it.

2. Hard coded links on the site that include a sid= value.

user is in a different country to the other one, and 2) nope.

also:

trying to order some stuff off your site and it won't allow me to put in either the county or country, as soon as I go on to them they dissapear!

the more we see of CCP the worse it gets.

[robbiez]

search on google for sid= site:antenocitisworkshop.com

and it will point you in the direction of the sid that has been hardcoded in your website and causing the problem.

You have got a few hardcoded links that include a different sid!!

As Dave said, it is nothing that is caused by CCP

[GreenbarnWeb]

Hi
It is also worth checking any incoming links from say adwords that they do not contain links with sid= in them.

[Dave]

trying to order some stuff off your site and it won't allow me to put in either the county or country, as soon as I go on to them they dissapear!

Answered in the other thread you started about this.

[Anbar]

search on google for sid= site:antenocitisworkshop.com

and it will point you in the direction of the sid that has been hardcoded in your website and causing the problem.

You have got a few hardcoded links that include a different sid!!

As Dave said, it is nothing that is caused by CCP

means nothing to me whatsoever... translation into english please? What's an sid etc etc etc?
Or do I have to pay somebody for that?

The site is straight from Howard, so if anythings been hardcoded, he did it. (he'll deny it of course, he likes denying he has done things, even when you have a server log showing his IP logging in to screw your website: "It wasn't me" he will say.)

[Anbar]

Hi
It is also worth checking any incoming links from say adwords that they do not contain links with sid= in them.

we dont use adwords.

So, up to your usual standards of helpfullness really.

Random poster 1 Howard 0