megaphone
Update your Profile with your Support type to get your Support Type badge.
Nominate Your Peers for NetSuite Support Community's Choice of the Quarter! Submit your nomination today.
Stay in the know of how NetSuite can help grow your business with our guides, webinars, and events. Subscribe Here
What Topic Should We Cover Next? Your idea could be our next feature—drop your suggestion now!
No Limits. Just possibilities. Join us for complimentary one-day events around the world and step into a future fueled by AI and limitless potential. Discover what's next at SuiteConnect Tour 2026.
Try Intelligent Payment Automation – Fee Free For Your First Month For more information, visit this thread.
New AI Community Guidelines. Please review and follow them to ensure AI use stays safe, accurate, and compliant.
Expand your NetSuite knowledge by joining our Ask A Guru Live sessions. RSVP on this event now.
Don't miss out on our Pop Quiz! You only have until tomorrow, April 3, 2026, 11:00AM ET to comment your answers.

Discussions
Stay up-to-date with the latest news from NetSuite. You’ll be in the know about how to connect with peers and take your business to new heights at our virtual, in-person, on demand events, and much more.
Now is the time to ask your NetSuite-savvy friends and colleagues to join the NetSuite Support Community! Refer now! Click here to watch and learn more!
New AI Community Guidelines. Please review and follow them to ensure AI use stays safe, accurate, and compliant.
Stay in the Know

Be sure you're subscribed to NetSuite communication to stay in the know about monthly happenings, updates and announcements. Subscribe

Security Flaw

edited May 17, 2013 1:06PM in Accounting / ERP 1 comment

Defect 251269 has been posted.   I was wondering if anyone else has run into a security flaw in Netsuite when processing Merchant e- solutions transactions with cc.

It is an error 163. Basically,  Netsuite error_code => 163
auth_response_text => HTTP GET is not allowed, use HTTP POST.  Meaning the transactional information is posted in the URL.  Meaning anyone with the motivation can snag the information from the URL.

I understand Merchant E made an update in order to continue towards a greater level of PCI security but it appears Netsuite has dropped the ball. 

This has been going on for two weeks and it doesn't seem to be getting solved fast enough. 

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!

Leaderboard

Community Whiz

Quarter 1 (Jan-Mar 2026)

This Week's Leaders

This Month's Leaders

All Time Leaders