FORUMS > St. Helens > Saints Superstore login insecure? |
![](images/sitelogos/2022-18.jpg) |
|
Rank | Posts | Team |
Club Coach | 253 | No Team Selected |
Joined | Service | Reputation |
Nov 2004 | 20 years | |
Online | Last Post | Last Page |
Aug 2023 | Dec 2018 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
10948_1544286383.png :d7dc4b20b2c2dd7b76ac6eac29d5604e_10948.png |
|
| Not sure if anyone's noticed this before, or even if it is worthy of all that much concern.
The superstore login page athttp://www.saintssuperstore.com/customer/account/login/[/code
Has the following login form<form id
with the following inputs<input type
As you can see, your username and password is sent in the clear over "http" and not securely over "https". If you use Firebug or something to change the action URL to "https" then you get an error as that URL isn't available on "https".
I emailed Saints about this several months ago but didn't receive a reply.
Cause for concern?
|
|
|
|
Rank | Posts | Team |
International Star | 416 | No Team Selected |
Joined | Service | Reputation |
Sep 2010 | 14 years | |
Online | Last Post | Last Page |
Nov 2010 | Nov 2010 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
: |
|
| I have no idea what all that means lol
|
|
|
|
Rank | Posts | Team |
Player Coach | 2471 | No Team Selected |
Joined | Service | Reputation |
Aug 2006 | 18 years | |
Online | Last Post | Last Page |
Jan 2019 | May 2016 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
[url=http://www.TopCashBack.co.uk/ref/enicomb:280mm7qy][img:280mm7qy]http://www.topcashback.co.uk/images/banners/468x60.gif[/img:280mm7qy][/url:280mm7qy]: |
|
| Yes. If it contains financial details the login credentials should be encrypted.
Very amateaurish really.
|
|
|
|
Rank | Posts | Team |
International Star | 12 | No Team Selected |
Joined | Service | Reputation |
Mar 2010 | 14 years | |
Online | Last Post | Last Page |
Oct 2010 | Oct 2010 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
50573_1281267557.jpg :d7dc4b20b2c2dd7b76ac6eac29d5604e_50573.jpg |
|
| My sis works for EMS Internet who does the store side of the site. Il let her know to tell the tech guys ![Very Happy icon_biggrin.gif](images/smilies//icon_biggrin.gif)
|
|
|
|
|
Rank | Posts | Team |
International Star | 6668 | No Team Selected |
Joined | Service | Reputation |
Sep 2010 | 14 years | |
Online | Last Post | Last Page |
Sep 2023 | Jun 2023 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
52697_1334270708.jpg :d7dc4b20b2c2dd7b76ac6eac29d5604e_52697.jpg |
|
| This could be an issue if the financial details are kept stored on the profiles. Saints should definately be looking into it.
|
|
|
|
Rank | Posts | Team |
Club Owner | 29204 | No Team Selected |
Joined | Service | Reputation |
Jul 2003 | 21 years | |
Online | Last Post | Last Page |
Jul 2024 | Jul 2024 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
6310_1310045241.jpg :d7dc4b20b2c2dd7b76ac6eac29d5604e_6310.jpg |
|
| Cheers for the heads up. I'm now £212,500 richer.
I even put the debit from your credit cards down 'Regards, Ski retail inc'. ![Wink icon_wink.gif](images/smilies//icon_wink.gif)
|
|
|
|
|
Rank | Posts | Team |
Player Coach | 16170 | No Team Selected |
Joined | Service | Reputation |
Jul 2008 | 16 years | |
Online | Last Post | Last Page |
Feb 2016 | Oct 2015 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
40218_1286737075.jpg Success is not final; failure is not fatal: it is the courage to continue that counts. (Winston Churchill):d7dc4b20b2c2dd7b76ac6eac29d5604e_40218.jpg |
|
| Quote: kinkyjohn "Not sure if anyone's noticed this before, or even if it is worthy of all that much concern....'"
Yes, definitely of concern. They should be using https. That is so bad. I'm glad I've never ordered anything online from Saints!
|
|
|
|
Rank | Posts | Team |
Club Owner | 676 | No Team Selected |
Joined | Service | Reputation |
Nov 2003 | 21 years | |
Online | Last Post | Last Page |
Apr 2014 | Jul 2012 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
cartoons/WB99.gif [url=http://www.sthelensstadium.com/pages/nextstep.htm:1tk1ye33][img:1tk1ye33]http://www.saints.org.uk/saints.org.uk/home/images/saints.gif[/img:1tk1ye33][/url:1tk1ye33]:cartoons/WB99.gif |
|
| Wasn't big mac on the board of directors for an IT security company ![Very Happy icon_biggrin.gif](images/smilies//icon_biggrin.gif)
|
|
|
|
|
Rank | Posts | Team |
International Board Member | 578 | No Team Selected |
Joined | Service | Reputation |
Jun 2002 | 22 years | |
Online | Last Post | Last Page |
Jul 2014 | Jul 2014 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
2177.jpg :2177.jpg |
|
| Also it doesn’t comply with PCI compliance. So the credit card company/banks could remove the credit card facility from Saints.
If anyne from the club reads this we can help. rlhttp://www.networkdefence.comrl
|
|
|
|
Rank | Posts | Team |
International Board Member | 486 | No Team Selected |
Joined | Service | Reputation |
Jun 2002 | 22 years | |
Online | Last Post | Last Page |
Jan 2017 | Jan 2017 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
2200.jpg :2200.jpg |
|
| Bizarre, the layout changed today on the store for the ISC stuff and now its back to how it was before.
It showed Wilkin and Roby in ISC branded polo shirt and t-shirt with the new Saints badge.
I have a screen shot on my work pc.
|
|
|
|
Rank | Posts | Team |
Player Coach | 2935 | No Team Selected |
Joined | Service | Reputation |
Feb 2005 | 19 years | |
Online | Last Post | Last Page |
Jul 2021 | Nov 2012 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
12951_1317512951.jpg [img:c0qkl00y]http://i81.photobucket.com/albums/j240/tycelchu/Entertainers-Banner-May-2009.gif[/img:c0qkl00y]:d7dc4b20b2c2dd7b76ac6eac29d5604e_12951.jpg |
|
| Quote: Ell Saint Blues "Bizarre, the layout changed today on the store for the ISC stuff and now its back to how it was before.
It showed Wilkin and Roby in ISC branded polo shirt and t-shirt with the new Saints badge.
I have a screen shot on my work pc.'"
The shot appears to be back. Not sure about it myself tbh.
|
|
|
|
Rank | Posts | Team |
Player Coach | 31335 | No Team Selected |
Joined | Service | Reputation |
May 2005 | 19 years | |
Online | Last Post | Last Page |
Jan 2015 | Nov 2014 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
15467_1321873759.jpg [img:wjrw39sz]http://i8.photobucket.com/albums/a48/saintorsinner/botevultracopy.gif[/img:wjrw39sz]
[b:wjrw39sz]Krasota, viara i borba[/b:wjrw39sz]:d7dc4b20b2c2dd7b76ac6eac29d5604e_15467.jpg |
|
| rlCringerl
|
|
|
|
Rank | Posts | Team |
International Board Member | 25689 | No Team Selected |
Joined | Service | Reputation |
Mar 2002 | 22 years | |
Online | Last Post | Last Page |
Mar 2016 | Mar 2016 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
1617.jpg [quote="Meyt N Prater Pie"]I think I hate wigan.[/quote]:1617.jpg |
|
| Quote: Saddened! "Cheers for the heads up. I'm now £212,500 richer.
I even put the debit from your credit cards down 'Regards, Ski retail inc'.
![Laughing icon_lol.gif](images/smilies//icon_lol.gif)
|
|
|
|
Rank | Posts | Team |
International Board Member | 11376 | ![](images/sitelogos/fullsize/18.png) |
Joined | Service | Reputation |
Sep 2002 | 22 years | |
Online | Last Post | Last Page |
May 2024 | Apr 2024 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
2960.jpg :2960.jpg |
|
| Quote: Ski "rlCringerl'"
I don't actually think that's too bad ![Confused icon_confused.gif](images/smilies//icon_confused.gif)
|
|
|
|
Rank | Posts | Team |
International Board Member | 4016 | ![](images/sitelogos/fullsize/42.png) |
Joined | Service | Reputation |
Jun 2002 | 22 years | |
Online | Last Post | Last Page |
Oct 2015 | Oct 2015 | LINK |
Milestone Posts |
|
Milestone Years |
|
Location |
|
Signature |
: |
|
| New ISC training range and home kit 2011 are listed as 'coming soon' on the site now, as well as the image of Wilkin and Roby wearing some new clobber as posted above by Mr Ski.
|
|
|
![](images/sitelogos/2022-18.jpg) |
|
![](images/sitelogos/2022-18.jpg) |