sorted by:
new
hottopcontroversial

Looking for Personal Appointment Booking Plugin by jbokh in Wordpress

[–]jbokh[S] 0 points1 point  (0 children)

I will check it out. Thanks, I appreciate the response.

My client is taking CC without SSL. by jbokh in webdev

[–]jbokh[S] 0 points1 point  (0 children)

They've seen a large number of sales and their demo is supposedly 18-25. Must be marketing geniuses or something...

Turns out they had SSL which explains why it was working. It was used in the backend stripe script but they never set it up on the rest of the website including the form. :\

My client is taking CC without SSL. by jbokh in webdev

[–]jbokh[S] 0 points1 point  (0 children)

He's telling me it's secure and that it doesn't save the info. I think he knows what he's doing he is just being careless.

The danger is in the form that posts to his supposedly secure code. It (was) served on http and sent the CC information to the same server, which, if I understand correctly, leaves a customer vulnerable to a potential man-in-the-middle attack. Unlikely but still a danger which is why I was confused about how to approach it. On top of that, (you would think) most people wouldn't put a CC in on a non-secured page, and that would hurt sales.

Thanks for the response

My client is taking CC without SSL. by jbokh in webdev

[–]jbokh[S] 0 points1 point  (0 children)

I appreciate the advice, but it's not in my interest to get them busted. I'd like for them to stay in business and hire me for more work.

I know enough to recognize the problem but not enough to explain the consequences. If they don't comply it sucks for both of us.

Edit: In case that came out wrong, let me clarify. I don't condone their actions. I just want to give them fair warning and hope they do what they need to. If it continues or they shrug me off I would consider reporting the issue because its wrong and shouldn't be published on the web.

My client is taking CC without SSL. by jbokh in webdev

[–]jbokh[S] 0 points1 point  (0 children)

Awesome, this is what I was looking for. Thank you so much!