Skip to content

Instantly share code, notes, and snippets.

@parndt
Created November 26, 2012 01:31
Show Gist options
  • Save parndt/4146131 to your computer and use it in GitHub Desktop.
Save parndt/4146131 to your computer and use it in GitHub Desktop.
InformIt issues while creating an account and ordering
  • Order form errors when email address contained a + as in [email protected] (which is completely valid!)

    • workaround: change email address to something without a + (boooo!)
  • Won't accept space characters in the account password

  • Forces use of a number in the account password (but won't allow spaces?) for dubious security improvements even though it made my password (and likely other peoples' passwords) far, far harder to remember.

  • 50% off voucher removed previous discount so eBook was $16 not $13 (is this a real problem or a policy?)

  • Passwords mailed in plain text when using password reset functionality. (this was a real shocker!) Attached is the email (with modified email address):

A request for your password has been made on the InformIT web site. If you did not make this request don't worry. This message can only be sent to the email address associated with your profile. If you did not make this request it is safe to disregard this message.

Your log in information:

Password: 1crappypassword

Email used to create account: [email protected]

You can change your password after logging in by visiting:
https://memberservices.informit.com/my_account/account.aspx?partner=53

As you can imagine this makes my account 100% vulnerable as email passes through multiple servers before reaching me and could be intercepted at any point. This was really disappointing.

And..

  • After opting not to save my card information the next screen along said (something like) "using your saved card ******1234"
    • scary
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment