RE: [OT] Urgent question about https

["Keith Doxey" <ukha@xxxxxxxxxxx>]

Hi Shaf

> -----Original Message-----
> From: Shaf Ali [mailto:shaf@xxxxxxx]
>
> Yup all traffic is but why the hell did this website use the GET
method ?
>

They didnt intend to :-(

> Slack coding me thinks.... (Another reason to get worried).
>

Yup. Someone just learning PHP I think.

<form action="test1.php"
method="$http_post_vars">

instead of

<form action="test1.php" method="POST">

$http_post_vars would be the array containing the infomation on the
receiving page. The fact that recieving page is called
"test1.php" does not
instill confidence either.

> Also one should also get worried as your credit card details will be
in
> their webserver logs (not good - especially with bored sys admins
these
> days).
>

Also in the history of the browser which is a serious problem if you have
used a machine accessable to other users

> Tricky one dude... Best safe than sorry - cancel the card.
>

I am going to in about 5 minutes. I am also taking a copy of the URL (with
details blatted) into the bank as "evidence"

Regards

Keith