Server rentals :: NFOservers.com

Forums

All times are UTC - 8 hours



Author Message
 Post subject: login (main site)
PostPosted: Sun Jun 10, 2012 12:06 pm 
Offline
This is my homepage
This is my homepage

Joined: Thu Jul 30, 2009 9:02 am
Posts: 154
I use to be able to use saved password editor to manually have it save login info on nfo main site but that no longer works.

NFO is the only damn site that thinks it must disable it if they accept credit card payments (which is 100% WRONG). All other sites on the web allow users/customers to save login info on their own computers, so they don't have to manually enter it every time they login.

Newegg
Tigerdirect
Amazon


Top
 Profile  
 
 Post subject: Re: login (main site)
PostPosted: Sun Jun 10, 2012 12:36 pm 
Offline
This is my homepage
This is my homepage

Joined: Sun Jun 26, 2011 8:03 am
Posts: 1130
Had issue 2 days ago in the evening, where I came on the site and had to re-enter all my login info. Normally it auto logs in. Something must have changed on the site.

Had to do the same everytime I visited all day yesterday too.

Finally today it's doing the auto login.

_________________
Visit gspreviews.com And Rate & Review Your Old & Current GSP's
Procon Hosting $2.50/month - aaquacks.com
Find Your GSP Coupons at gspreviews.com/coupons/
Make Money Using Url Shortners at w1z.it


Top
 Profile  
 
 Post subject: Re: login (main site)
PostPosted: Sun Jun 10, 2012 12:44 pm 
Offline
This is my homepage
This is my homepage

Joined: Thu Jul 30, 2009 9:02 am
Posts: 154
The last time i posted about his John said he had to disable to be PCI compliant which is weird when every other website that accepts credit cards still allows it.

I have looked at PCI rules and nothing in it says websites must not allow customers to save login info. It has something about employee's shouldn't save login info if they have access to database with customers personal info.


Top
 Profile  
 
 Post subject: Re: login (main site)
PostPosted: Sun Jun 10, 2012 2:46 pm 
Offline
Staff
Staff
User avatar

Joined: Thu Jul 22, 2004 12:24 am
Posts: 1028
Location: Big Bear, CA
You may want to post a reply in that older thread then, if this is just a continuation of that topic. As for logging in automatically on our site, that is done via cookies, and still works. You can use that method instead of storing passwords locally, which isn't much different from a security standpoint.

_________________
TimeX


Top
 Profile  
 
 Post subject: Re: login (main site)
PostPosted: Sun Jun 10, 2012 5:05 pm 
Offline
This is my homepage
This is my homepage

Joined: Thu Jul 30, 2009 9:02 am
Posts: 154
I did have a work around but now its only working on part of nfo site. Seems like every time i start fresh (format) something else ends up being blocked on this site lol.

I hope the next time NFO has it's site scanned to show "PCI Compliance" you makes sure to address this with the place doing the scan. No reason to keep it disabled when you don't have.

Nothing in PCI Security Council standards says websites must block customers from being able to use save login info, if it did sites like Amazon and Newegg would be forced to disable it too.


Top
 Profile  
 
 Post subject: Re: login (main site)
PostPosted: Sun Jun 10, 2012 9:15 pm 
Offline
Founder
Founder
User avatar

Joined: Thu Apr 18, 2002 11:04 pm
Posts: 9239
Location: Seattle
We do not have a choice in this matter. I have already escalated it with the scanner and with our processor and have been told in no uncertain terms that it is a hard requirement, with no exceptions granted. Why some other sites appear to not be held to this same standard, I do not know.

We do not need multiple threads on this topic. One is sufficient. In the other thread, workarounds were discussed.

(I personally regularly access other sites that have the same requirement, including multiple banks and the UPS website.)


Top
 Profile  
 
 Post subject: Re: login (main site)
PostPosted: Mon Jun 11, 2012 2:48 am 
Offline
This is my homepage
This is my homepage

Joined: Thu Jul 30, 2009 9:02 am
Posts: 154
Sounds like the place you used is making up its own rules, probably dealing with a person from India lol. If they can't show you where it states you can't allow users/customer to save login info then i would find a new place next time you have to do a scan.


Top
 Profile  
 
 Post subject: Re: login (main site)
PostPosted: Mon Jun 11, 2012 10:11 am 
Offline
Founder
Founder
User avatar

Joined: Thu Apr 18, 2002 11:04 pm
Posts: 9239
Location: Seattle
Switching both the scanner and payment processor, and modifying all of our systems to use the new processor, would be non-trivial. We'll stick with what we have now.

As I mentioned, we're not the only site that does this. The banks I use also do it, as does UPS. It is a security precaution that makes some sense.

If you just set it up to stay logged in, you can avoid having to log back in entirely.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
It is currently Fri May 24, 2013 10:28 am
Powered by phpBB® Forum Software © phpBB Group