New AffiliateFuture Password Security

[Lee_Owen]

Tweet

I tried getting my password sent to me because I wanted to input it into affmeter, entered email and left password empty but didn't get sent my password, but it was in admin, strange not many do that, it should be starred out at least.

Yes, let's hope all networks don't start doing it, although on one online admin panel I have, windows saves my user password field, so I just login, change password, log out, login, windows saves password and on we go, only with this one I'll have to update affmeter, it it works like that then fair enough.

And while we're here, when the cookie times out, you're redirected to affiliates.affiliatefuture.co.uk - could you scrap that please and redirect back to the front where my login details are saved.

I suppose I could enter details there so when I time out I can just login again, well maybe I'll do that but then that's three fields I have to update every 90 days... alternatively name your username boxes and password boxes the same and windows should input the same in all - if it works that way.

[hirschnathan]

Will this effect the cashback url script?

[morleymouse]

Why not just have a system that when you change bank details or any details an automated email goes out and asks you to confirm the change

I think this should be a standard with any network. I've never heard of it happening but if someone logged into your account a day before pay day changed all the details to theirs they'd get away with it. 90 days password change wouldnt be of much use, thats 2 maybe 3 payments.

I think that some added security when changing anything would be a good move, not saying this isnt as security online is always an issue but if my payment details change, main address or any contact details id expect a phone call at least.

[Darren]

This is gonna cause us all kinds of problems...with our software logging in, through to the multiple users at our company. Yet another job for me to have to do

[Rich]

I'll have to agree with some of the others here, forcing users to change passwords has little effect on security. The only thing it stops is someone who had access to your account that you don't know about continuing to have access with out you knowledge. I don't see that as as big an issue as the other issues.

Once they have a password they can still change it to lock you out, they can still change your payment details or any other part of your account. Forcing users to change just increases the chances of them using memorable words or, if secure passwords are needed, writing down the password.

I think secure passwords and confirmation of critical changes would have solved more problems.