Maybe it is time for EC-Council web administrators to attend a security course

EC-Council run several courses and certifications related to security. Looks like their web team has been skipping these courses.

http://www.securityorb.com/2014/02/ec-council-website-hacked-swondens-passport-site/