4 ms·

Great job. You need to fix a couple of things - https - http://retentionbooster.com/site/api_addaction?action_name=login&email=EMAIL&api_key=b4bc7effa8f3e55e1

Great job. You need to fix a couple of things - https - http://retentionbooster.com/site/api_addaction?action_name=login&email=EMAIL&api_key=b4bc7effa8f3e55e1afb82325bbfa31c http://retentionbooster.com/site/api_addaction?action_name=l... should return a pixel not a text/html 1 - the response when a returning user logs in is currently a 500 error (insert into rb_retentions fails because of duplicate email) - anyone can login to dashboard with a non registered email or non-email http://retentionbooster.com/site/adduser?email={random}&password= http://retentionbooster.com/site/adduser?email={random}&pass... - make sure the retention email doesn't end up in spam folder

rbinv 12y ago
> - anyone can login to dashboard with a non registered email or non-email http://retentionbooster.com/site/adduser?email={random}&pass.. http://retentionbooster.com/site/adduser?email={random}&pass.... Does not seem to happen, here (shows the home page). Maybe you're cookied/logged in? > - make sure the retention email doesn't end up in spam folder That's not really up to him (except, of course, for basic sender stuff like SPF and DKIM).
- bilalhusain 12y ago
  - login (use something like http://retentionbooster.com/site/adduser?email=a43abe&password= http://retentionbooster.com/site/adduser?email=a43abe&passwo...) - choosing a good transactional email service might be helpful.
  - rbinv 12y ago
    That's a pretty good idea (as long as these are considered "transactional" by the provider). edit: Can confirm the authentication behavior now. edit 2: In fact, the username is printed without any escaping.
spacefight 12y ago
You have a page "Company". If you are a registered company, indicate its name and place of registration. That would add credibility.
- makyol 12y ago
  Thanks. We are not cooperated yet but that would definitely be a good idea.

rbinv 12y ago

> - anyone can login to dashboard with a non registered email or non-email http://retentionbooster.com/site/adduser?email={random}&pass.. http://retentionbooster.com/site/adduser?email={random}&pass.... Does not seem to happen, here (shows the home page). Maybe you're cookied/logged in? > - make sure the retention email doesn't end up in spam folder That's not really up to him (except, of course, for basic sender stuff like SPF and DKIM).

bilalhusain 12y ago
- login (use something like http://retentionbooster.com/site/adduser?email=a43abe&password= http://retentionbooster.com/site/adduser?email=a43abe&passwo...) - choosing a good transactional email service might be helpful.
- rbinv 12y ago
  That's a pretty good idea (as long as these are considered "transactional" by the provider). edit: Can confirm the authentication behavior now. edit 2: In fact, the username is printed without any escaping.

spacefight 12y ago

You have a page "Company". If you are a registered company, indicate its name and place of registration. That would add credibility.

makyol 12y ago
Thanks. We are not cooperated yet but that would definitely be a good idea.