Password Nightmare

[bethr]

I received an e-mail today informing me it was time to renew, and that my credit card information needed to be updated.

I went to this location:

https://secure.jaguarpc.com/jaguarpc/clients/index.php

And discovered that by inputting my domain name and ANY e-mail address... I could get my password sent anywhere. This panicked me and sent me to my aletia.com control panel to change my account password.

I did so immediately, (and of course, wrote down the password)... and then tried to sign into my e-mail.

Neither the old password, nor the new password works. It signed me out of the aletia.com control panel, and now I can't sign back in.

https://secure.jaguarpc.com/jaguarpc/clients/index.php still gives the OLD password, which doesn't work.

And of course, the ticket system won't let me open a ticket, because I can't log in.

PLEASE HELP!

[Julian Muñoz]

THe username for the client's section could be your account name, or your domain name.

The password should be the password you specified when you signed up first.

[bethr]

Although my old password is still what gets e-mailed to me, it isn't working. I have used my "account name" for about 1 year now, and am 100% confident I am entering that correctly.

My new password (which I changed using my Aletia control panel) does not work either.

And just for grins, my FTP program which has everything already entered in it so that I can't make a typo... has the very same problems.

[jason]

The CPanel and client section passwords are separate ones. If you change the Cpanel password it doesn't change the client section's, but it would change your default mailbox and FTP passwords, since those are the same as your CPanel one. Did you remember to change the password in your FTP client after you changed the password in the Cpanel?

I agree that the lost password feature of the client section is a little insecure. Since they do ask for your credit card number it offers a bit of security (and the same amount of it as if you opened a ticket in the old system asking for your password), but a 4-digit number could potentiallybe guessed. It would be better if it asked for your domain name and last four digits and then sent the password to the email address on file.

--Jason