CLOSED - Jeans for 11p

Highland_Lass_2

royalsteve wrote:

Dont wont to put people off but when i ordered from Empire Stores and The Store we had the same prob....strangely a week later someone used my card to purchase goods from a high street store...funny though because the card i used has NEVER left the house as i only use it for internet purchases...and the card company could see that too....i use a different card for the high st...I didnt get charged though!

Steve

You've made my mind up for me. Thanks. I personally don't think it's worth the risk. Good on you the ones that get these though. (I'll stick to Tesco or Asda for hubbies work jeans at £4)

GibsonSt19

royalsteve wrote:

So secure it hasnt been properly load tested....again...amateurs!

anyone can setup a website...it is so easy...thats the problem.......easier than baking a cake....making a decent, secure site robust against a huge flood of orders...now thats where a decent professional site shines...

But in THIS case, I think we have some sort of spoonerism on your last 2 words!

LD

Success:


But, just two of their T&C's

We will notify you by email as soon as possible to confirm receipt of your order and send you a further email to confirm your order details. Please note that neither email is acceptance of your order. Our acceptance of your order will take place when we dispatch the product(s) to you.

We try to ensure that the prices quoted are correct and that all products are accurately described on this website. However, orders will only be accepted if there are no material errors in the description or price of goods displayed on this website. If we discover an error in the price or description of goods that you have ordered, we will inform you as soon as possible and give you the option of reconfirming your order based on the correct price or description, or cancelling it. If we are unable to contact you, we will treat your order as cancelled.

meinnit

Thanks OP, got my order in!

You've left the session ID in the URL which means EVERYONE that clicks the link is using the same session! I would suggest editing that link to prevent this.

RufusA

To be fair to Additions, the apparent site security isn't entirely their fault.

Most sites need some unique identifier to keep track of a customer so that it can remember your shopping basket as you click round the site.

Two main techniques used to do this are session cookies, and ids encoded in to the URLs. With cookies getting a bad name as they are often used by spyware, a lot of good sites now use an ID in the URL.

Unfortunately the link originally posted by mojomama includes a session id in the URL "fh_session=5XSG84MH0RP18KXH19KXX29L57TK5GC7" so that everyone who clicks on that link, the web server assumes to be the same person (until the session times out which it won't if people keep clicking on that link).

The URL for the page without revealing your details to everyone is:

Special Offer Jeans

Worth remembering to check URLs carefully for anything that looks like a long ID before posting it! If the above URL doesn't work, then just go to the homepage and search for "KW7526"!

If people have used the original URL, they may find their orders are lost as the system may not see them as seperate orders!

HTH - Rufus.

LD

yea had to turn off a web filter to allow me to complete there - must turn it on!

royalsteve

Highland_Lass wrote:

You've made my mind up for me. Thanks. I personally don't think it's worth the risk. Good on you the ones that get these though. (I'll stick to Tesco or Asda for hubbies work jeans at £4)

yeh the £4 jeans are ok.......not the best but cant complain as general workhorse jeans...if i work in the garden or go to footy, etc then i just wear them....i used to spend £50-100 on a pair of jeans but i would only wear them out to pubs!

royalsteve

RufusA wrote:

To be fair to Additions, the apparent site security isn't entirely their fault.

Most sites need some unique identifier to keep track of a customer so that it can remember your shopping basket as you click round the site.

Two main techniques used to do this are session cookies, and ids encoded in to the URLs. With cookies getting a bad name as they are often used by spyware, a lot of good sites now use an ID in the URL.

Unfortunately the link originally posted by mojomama includes a session id in the URL "fh_session=5XSG84MH0RP18KXH19KXX29L57TK5GC7" so that everyone who clicks on that link, the web server assumes to be the same person (until the session times out which it won't if people keep clicking on that link).

The URL for the page without revealing your details to everyone is:

Special Offer Jeans

Worth remembering to check URLs carefully for anything that looks like a long ID before posting it! If the above URL doesn't work, then just go to the homepage and search for "KW7526"!

If people have used the original URL, they may find their orders are lost as the system may not see them as seperate orders!

HTH - Rufus.

Yep absoluely correct on this one......in my haste i had clicked on the link which contains his session id........doh!

So, unlike The Store and Empire Stores it seems ok.

Found the jeans o the site manually and all ok!

Cheers!

Mecoconuts

Ordered ! Cheers OP !

divadee

I have just given it a go, for work jeans for mr divadee