Affiliate Security Flaw?

by 5 replies
6
A friend has an affiliate program set up by her site techs.

When I set up a redirect page with my Aff. ID, the redirect works well; however, the URL that shows up in the browser window is the proper page on her site but with my Aff. ID tagged onto the end of the URL.

Is this a problem that could be exploited to steal an affiliate's commissions?

I am under the impression that the security of the Aff. ID is one of the reasons why a redirect page is used.

Her tech support says, "There's no way anyone can steal commissions from your affiliates!"

I do know of a specific instance where commissions were stolen from an affiliate with Commission Junction.

Am I unnecessarily concerned?

Thank you.
Paul
#programming #affiliate #flaw #security
  • It depends.

    If her system says "first affiliate for a visitor wins", then by the time they can get the URL, they've already been tagged (depending on your cloaking system that is).

    If it's "last affiliate for a visitor wins", then yes, they can steal the commission.
    • [1] reply
    • Thank you, Roger. I'm not sure what the "first" and "last" affiliate means. I guess I don't understand the process well enough.

      Paul
      • [1] reply
  • Banned
    [DELETED]
  • Seems like the regular public is becoming more savvy in their casual visits to websites, and if they see something in the URL or in the address bar of their browser that looks like affiliate links, they might try to change it manually to reflect their own affiliate link ID. I don't know why, unless the visitor is also an affiliate and wants cash back on that purchase, or the visitor simply wants to disrupt your tracking method.
  • Thanks to everyone for the help.

    Paul

Next Topics on Trending Feed

  • 6

    A friend has an affiliate program set up by her site techs. When I set up a redirect page with my Aff. ID, the redirect works well; however, the URL that shows up in the browser window is the proper page on her site but with my Aff. ID tagged onto the end of the URL.