5 ms·
Registration doesn’t work... > Forbidden (403) CSRF verification failed. Request aborted. Also, just some more feedback on making this a business that is char
by Closi 6y ago
Registration doesn’t work...
> Forbidden (403) CSRF verification failed. Request aborted.
Also, just some more feedback on making this a business that is charging for holding people's private information:
* Your privacy policy should be an actual privacy policy, stating what information you collect rather than just stating how you are super private and hate all the "crap" that other vendors do. Particularly as when combined with the terms, this is not GDPR compliant.
* Intentionally putting your term and conditions in a hard to read font to make a joke about rental cars is probably not good business sense - Just make them easy to read straight out, it just looks more professional, and also makes it look like you aren't hiding something, particularly when...
* The terms are terrible for customers! "This service is not suitable for any purpose [and users] are expressly warned not to harbor any expectations at all, reasonable or otherwise." - I don't think these terms sound like what is sold on the main page! I'm in the UK and here at least consumers have a right to purchase something that is fit-for-purpose and you can't exclude that within T&C's, but not sure if it's different in the states! Either way, I don't think you should sell something, and then state in the terms and conditions that it's not suitable for the purpose you are selling it for.
- leephillips 6y agoCSRF problem fixed, thank you and sorry.
- leephillips 6y agoTurns out there are problems with combining Django’s CSRF protection with https over a reverse proxy.
- Closi 6y agoAlso secret questions don’t work, internal server error. Good luck getting it working, it looks like a good idea. The points I’ve raised are a bit critical but meant in the best spirit just to try and help make it a success.
- leephillips 6y agoI appreciate the thought you've put into your advice, and I will take it seriously.
- leephillips 6y agoI can’t reproduce the error in setting the secret questions, but thanks for mentioning it, there must be something wrong somewhere.
- Closi 6y agoIt’s when you try to log back in with them
- leephillips 6y agoThat's working now. Thanks for noticing.
- leephillips 6y agoI understand your point. But actually these are the standard terms that companies in the US pretend that users have agreed to. I just put it in more explicit language. There are always clauses about not promising merchantability, etc. For me, it means that I intend to and will try to provide what I promise, but if it breaks you have agreed not to sue me.
- Closi 6y agoSaying your product is not fit for purpose within the terms is absolutely not part of standard terms, and I suspect these terms currently make it MUCH easier to sue you, not less ('He knew his product wasn't fit for purpose yet he sold the service anyway!'). Also, your terms currently let you take payment and not even provide the paid-for service (i.e. cancel it for any reason with no refund, and no right to even ask for refund, and I can't even find a support email!) - this seems shady to me if you are asking for $300 for lifetime membership! I would expect a pro-rated refund for subscriptions as a minimum, and some sort of pro-rata for the $300 (e.g. over 5 years). Besides - why are you trying to emulate other people’s shitty practices? If someone isn’t happy why not let them at least request a refund? My personal advice would be - just get some generic terms written by an actual lawyer and put them in instead. Or just copy/paste some pre-written terms you can find available on any number of websites. It will look more professional, protect you more, and be more reasonable to your users :)