Credit Card Expiration

osirion · #1 08-02-2006, 05:22 AM

The HG billing system is very kind to remind you that your credit card that you have on file will be expired at the end of the month. In fact, it is so kind that it even gives you your username and password so you can log in immediately and do it.

Besides the fact that my bank only re-issues my credit card 2 weeks before it expires and this reminder comes at the beginning of the month, not halfway through it. Which means its not that much of a reminder for me, because I will most probably forget about it by then anyway...
The most worrying factor in all this is that the send you an e-Mail with your password in it!

I dont think people login details should EVER be e-Mailed. Its almost understandable if one requests "I forgot my password" or something of the sort; but generally even like that, systems tend to reset the password and issue the new password to users.

Giving out passwords (especially over e-Mail) is just a major security risk. It could be intercepted, or if your like most people and keep all your e-Mail - it could be read by someone else at a later date.
Also, if your like most people that use a password for multiple sites and such, your security has not only been compromised on HostGator, but other places as well.

PLEASE HOSTGATOR, remove the login credentials from this reminder!

esl · #2 08-02-2006, 06:25 AM

I agree 100% osirion!

#3 08-02-2006, 06:51 AM

This is your password to billing and support only, not your account password. We always suggest that this password be different from the password you use to login to your cpanel/whm or root and the email address on file be only accessible by yourself.

http://forums.hostgator.com/showthre...light=password has a post from Brent on this matter.

dema · #4 08-02-2006, 10:07 AM

Quote:

Originally Posted by GatorJay

This is your password to billing and support only, not your account password. We always suggest that this password be different from the password you use to login to your cpanel/whm or root and the email address on file be only accessible by yourself.

http://forums.hostgator.com/showthre...light=password has a post from Brent on this matter.

It's still a password being sent in cleartext over a network. Regardless of what the password is, or is for, that is absolutely awful policy.