Re: Malicious Code Exploit: sogppao.barneyandfriends.com:808
Well, I can now draw one of 4 conclusions: 1. I was accidentally allowing an exploit because of a tracking tag or included script like Piwik or something else embedded into the footer. 2. There was a hole in my template allowing an exploit. 3. They got sick of trying to exploit me daily. 4. Some sec...
Jump to post- Fri Jun 25, 2010 11:08 pm
- Replies 14
- Views 3571
Re: Malicious Code Exploit: sogppao.barneyandfriends.com:808
Thanks Q. I'll try updating to 1.4.8 and see if that helps things. (edit: update) I'm in the process of running a clean backup of my site so I can try upgrading. This sort of sucks, because that means I'll lose my template (Cofran still isn't done updating for 1.4.8, and I don't know scripting well ...
Jump to post- Thu Jun 24, 2010 11:00 pm
- Replies 14
- Views 3571
Re: Malicious Code Exploit: sogppao.barneyandfriends.com:808
Though now I'm starting to think that there are security holes that make it much easier to exploit OpenCart. I just had another one, different spam server, etc. I'm not listed on milkw0rm or other exploit databases that I can find. I actually think this is being caused by the way that OC parses URL'...
Jump to post- Wed Jun 23, 2010 1:28 am
- Replies 14
- Views 3571
Re: Template for Opecart 1.4.7 [FREE - ]
Don't plan on any updates until after the World Cup 
- Tue Jun 22, 2010 3:43 am
- Replies 75
- Views 24000
Re: Malicious Code Exploit: sogppao.barneyandfriends.com:808
Exactly.
It's not necessarily a cart-specific exploit. Wikipedia explanation
- Mon Jun 21, 2010 10:27 pm
- Replies 14
- Views 3571
Re: Malicious Code Exploit: sogppao.barneyandfriends.com:808
Nghia, Do you use access logs or anything of that sort? Find out (either with your server file manager or via FTP) when the files were changed, and then use the access logs (if you have them) to determine the IP of the user. It was probably a proxy, but if you get an IP that resolves to IndoNet in I...
Jump to post- Fri Jun 18, 2010 3:21 am
- Replies 14
- Views 3571
Re: Malicious Code Exploit: sogppao.barneyandfriends.com:808
Actually, it's a hex string that was under the re-direct. It (and the redirect) were in /index.php /default.html (my file) /404.html (my file) /admin/index.php and it's SOMEWHERE else. I can't figure out where yet (I've downloaded my site and am running a mass find), but it's still on the top line o...
Jump to post- Wed Jun 16, 2010 11:19 pm
- Replies 14
- Views 3571
Re: Malicious Code Exploit: sogppao.barneyandfriends.com:808
Nevermind. I know it's not.
Jump to post- Wed Jun 16, 2010 10:42 pm
- Replies 14
- Views 3571
Malicious Code Exploit: sogppao.barneyandfriends.com:8080
So I had a Indonet user last night try a x-site script exploit to incorporate a URL redirect, and I'm scrubbing my code. I noticed down on the bottom of /index.php a tag: <!--bdf141ba2ff3fa260dc355a5709bcdc4--> When decoding from hex, I get a checksum of: MD2: ed85e926ac2817adba350313d043ad7e MD4: 2...
Jump to post- Wed Jun 16, 2010 10:30 pm
- Replies 14
- Views 3571
Re: htaccess www url redirection
Just curious, but what would be the benefits of using the non-www domain as opposed to the www domain?
Jump to post- Wed Jun 16, 2010 4:18 am
- Replies 3
- Views 1138
Re: Automated emails to customers based on products bought
I copy from my thread http://forum.opencart.com/viewtopic.php?f=20&t=15637 There is an online gift shop in the UK, called Getting Personal - http://www.gettingpersonal.co.uk One of the coolest things they do is, about a week after I receive an order, I get an email from them, with the subject &...
Jump to post- Wed Jun 16, 2010 2:20 am
- Replies 152
- Views 60097
Re: 1.4.7 Simplify Search Function
Strangely, that didn't work. I'll mention it to the template designer, as I think he had other fixes to be incorporated for 1.4.8's release.
Jump to post- Wed Jun 16, 2010 2:15 am
- Replies 9
- Views 1633
Re: 403 - Forbidden: Access is denied - instalace
RBS, I've had some funky permission errors before, as well. Not with OpenCart, but with other software. I've found it can be very helpful to check your server's error logs, as it will usually state WHY something is forbidden or otherwise. A few quick questions: 1. When you set file permissions, did ...
Jump to post- Tue Jun 15, 2010 5:32 am
- Replies 9
- Views 18926
Re: 1.4.7 Simplify Search Function
Huh. It must just not be properly set up for my template, then.
Jump to post- Tue Jun 15, 2010 5:13 am
- Replies 9
- Views 1633
Import/Export - Quick Short-Cuts for easy SEO-friendlyness
Hey, I've been playing around with Import/Export, and thought that some people may have found my findings useful. It's really just ways to make pre-populating data simpler. These are for Excel, but should also work on OO.org 1. Easy SEO-friendly meta description - I used to copy my product descripti...
Jump to post- Tue Jun 15, 2010 3:54 am
- Replies 0
- Views 501
Re: 1.4.7 Simplify Search Function
Works beautifully. Searches now by product model and in description.
Quick/related question: How do I change default behavior for my search bar to execute the search function when I hit the ENTER/Return key? Would I have to map it in the javascript?
- Tue Jun 15, 2010 3:37 am
- Replies 9
- Views 1633
Re: 1.4.7 Simplify Search Function
Huh. I wonder how many times I overlooked that. Thank you!
Jump to post- Tue Jun 15, 2010 1:56 am
- Replies 9
- Views 1633
1.4.7 Simplify Search Function
Hi! I'm trying to change the default search behavior to search product model, description, etc in all categories. I'm guessing I have to modify core files, but I'm not really sure where to start. Has anyone else done this? I spent the last half hour searching, and was not able to find a "soluti...
Jump to post- Tue Jun 15, 2010 1:30 am
- Replies 9
- Views 1633
Re: Ink and Toner Store
So I re-skinned my header to be much simpler and replaced the img-driven nav bar with a text driven nav, using css background properties to simulate buttons. I still need to change the product rollover background and the buttons to match my theme color, but things are looking cleaner, no? I need to ...
Jump to post- Sat Jun 12, 2010 5:00 am
- Replies 5
- Views 2207
