CCAvenue Gateway Hacked

[buddyram]

even now for pre-order of anniversary issue Digit is using CCAvenue gateway!

Yeah! Trust Digit Guys!

 

[Vyom]

^ It's not the matter to trust digit! We have full trust in them.
But what would you do, if someone hacked the medium by which the transactions are performed between you and them?
Even they can't help it, in such cases!

 

[buddyram]

Yes. I agree with you.
if digit is using it, then it must have been a reliable means. if we are aware of gateway hacking in CCAvenue, then obviously "digit guys" must be knowing it!
I hope something would/should be done soon.

 

[Garbage]

if digit is using it, then it must have been a reliable means. if we are aware of gateway hacking in CCAvenue, then obviously "digit guys" must be knowing it!

Blind followers!

 

[skeletor]

Yes. I agree with you.
if digit is using it, then it must have been a reliable means. if we are aware of gateway hacking in CCAvenue, then obviously "digit guys" must be knowing it!
I hope something would/should be done soon.

Honestly, there is nothing like if X is using it...then it is/must-have-been reliable.

It appeared reliable to everyone and even me, but not now as we know it was designed by novice people.

 

[Tejas.Gupta]

Atleast they could have used MD5 hashes :/

 

[suyash_123]

hi all,
my site was also infected / hacked by Sql injection methord.
till date i dont know waht was Sql injection ( i used Asp site)

Sql injection usually happens when we write Sql queries (which is used to access database) directly In Asp (front end ) code.

examle : select * from table1 where NameId = ' selec

SELECT email, passwd, login_id, full_name
FROM members
WHERE email = 'myname' + 'INSERT INTO members ('email','passwd','login_id','full_name')
VALUES ('steve@unixwiz.net','hello','steve','Steve Friedl');--'

likewise they insert query in query and Get data or insert data and update too...

I did that in whole website and have to make site down for a Week to remove this issue.

solution was : to make as muck as store procedures and avoid Sql quires inline in code.
also use Regular expressions to remove special charactres lIke " ' "

this ' syambaol is very very very dangerous to SQL database and use differtn ways to Compramist it By repalcing ' with '' or etc etc.


as My Site was not Payment supported i was safe.
But Man sql injection On Payment gate Way is A Big S#it on face.
they must be very very secure By suing Numerous algorithms and ssl etc.

but They are saving password son text format ha ah ha useless

i m unsafe Now....

 

[Garbage]

[offtopic]
@Suyash_123,
No offense man, but it was really hard to read your post. I think you should read this

And sorry for your site.
[/offtopic]