The UK Home Automation Archive

Archive Home
Group Home
Search Archive


Advanced Search

The UKHA-ARCHIVE IS CEASING OPERATIONS 31 DEC 2024


[Message Prev][Message Next][Thread Prev][Thread Next][Message Index][Thread Index]

RE: [OT] Urgent question about https


  • Subject: RE: [OT] Urgent question about https
  • From: "Keith Doxey" <ukha@xxxxxxxxxxx>
  • Date: Fri, 17 Dec 2004 09:45:20 -0000


Hi Shaf

> -----Original Message-----
> From: Shaf Ali [mailto:shaf@xxxxxxx]
>
> Yup all traffic is but why the hell did this website use the GET
method ?
>

They didnt intend to :-(

> Slack coding me thinks.... (Another reason to get worried).
>

Yup. Someone just learning PHP I think.

<form action="test1.php"
method="$http_post_vars">

instead of

<form action="test1.php" method="POST">

$http_post_vars would be the array containing the infomation on the
receiving page. The fact that recieving page is called
"test1.php" does not
instill confidence either.

> Also one should also get worried as your credit card details will be
in
> their webserver logs (not good - especially with bored sys admins
these
> days).
>

Also in the history of the browser which is a serious problem if you have
used a machine accessable to other users

> Tricky one dude... Best safe than sorry - cancel the card.
>

I am going to in about 5 minutes. I am also taking a copy of the URL (with
details blatted) into the bank as "evidence"

Regards

Keith




UKHA_D Main Index | UKHA_D Thread Index | UKHA_D Home | Archives Home

Comments to the Webmaster are always welcomed, please use this contact form . Note that as this site is a mailing list archive, the Webmaster has no control over the contents of the messages. Comments about message content should be directed to the relevant mailing list.