GIXEN Forum - Post a reply

Post a reply

Username

Subject

Anti-Bot check:

Enter characters from the following image:

Item ID warning

Please provide eBay item id number (unless provided already) in the post message if you have a question about specific item. I cannot investigate an issue without it.

Message body

Emoticons





View more Emoticons

Font colour: Font size:

Close Tags

[quote="eljugg"]After being away from my computer for a bit, I refreshed the page with my scheduled snipes at this page (replace <username>):
[quote]gixen.com/home_2.php?username=<username>&mirror=1[/quote]

Due to a timeout, I received this error:
[quote]Session expired. Please sign in again.[/quote]

The top of this page also has the normal login form including this notice:
[quote]Login is SSL protected.[/quote]

I noticed after logging in no h.t.t.p.s page was hit. This is the login form (html) from the above page:
[code]<form id="form1" name="form1" method="post" action="home_1.php">[/code]

This needs to be fixed/changed to what the homepage has (with h.t.t.p.s action):
[code]<form id="form1" name="form1" method="post" action="h.t.t.p.s://w.w.w.gixen.com/home_1.php">[/code]

I suggest checking other places where a login might appear (with home_1.php as the action) and verifying they are all h.t.t.p.s actions.  It might be worth considering making all pages h.t.t.p.s after logging in.  I realize this is a free (for most) service and I have found it useful thus far, however having my ebay login and password sent in plain text when I'm explicitly told it won't be is unacceptable.

Thanks.

[i]* To get past your spam filter I had to use h.t.t.p.s and w.w.w in my explanation[/i][/quote]

Options
HTML is OFF
BBCode is ON
Smilies are ON

	Disable BBCode in this post
	Disable Smilies in this post