Screenshot: http://imgur.com/D2mk68W
Changing a variable in McGraw Hill Connect gets you access to their eBook without paying.
Preface: I am not a web designer, and have only done basic programming.
I didn't buy the eBook, but I noticed that the URL contains a ton of information (first name, last name, section ID, due date, username, book ISBN, and also whether or not you have access to the book). By changing false to true, I am able to access the entire book. When I log out and return to my account page, it says that I do not have eBook access because I have not paid.
Mcgraw Hill Registration Code Generator
I even tried entering a class ID for my girlfriend's Anatomy class, and was able to get into the section and view all of the content.
Pretty lazy programming here. It also does not support linux or android. Not because of flash or anything, it literally won't allow you to log on. User agent spoofing did not fix the problem. I'm kind of offended that I spent as much money as I did to access such an insecure and poorly written website.
What are your thoughts?