Re: Orders Processing/Orders Completed/Order Statuses showing 0%
For anyone applying this fix, you'll want to update the oc_statistics table with the order_status counts. You can get these using the following query: SELECT o.order_status_id, COUNT( o.order_status_id ) AS total, os.name FROM oc_order o LEFT JOIN oc_order_status os ON ( o.order_status_id = os.order...
Jump to post- Installation, Upgrade, & Config Support
- Orders Processing/Orders Completed/Order Statuses showing 0%
- Fri Oct 19, 2018 5:10 pm
- Replies 31
- Views 12960
Re: OC 2.2.0.0 SQL injection attack?
OK thanks, it must be left over from the previous 1.5.x installation. JSON support is enabled on the server. I can't find any other modified files. I've changed all the passwords, cleaned the injected code out of the database, and put a function in my .tpl files to strip out any <script> tags. This ...
Jump to post- Fri Mar 31, 2017 11:38 pm
- Replies 9
- Views 8986
Re: OC 2.2.0.0 SQL injection attack?
OK, I've just found something - a load of files in the /system/storage/download folder. They've all got names like: route.php.jpg.e849b652eead396d7c1b6ad5bfa0408a with old dates, so I thought they were just left over from old downloads. But the content of one of them is: <?php echo "$#@&\n\...
Jump to post- Fri Mar 31, 2017 12:06 am
- Replies 9
- Views 8986
Re: OC 2.2.0.0 SQL injection attack?
Thanks Angela. The exploit you linked to is a weakness in /system/helper/json.php. I compared the 2.2.0.0 and 2.3.0.2 versions of this file and they are identical. In other words, if this was the vulnerability, it's still present in the latest version... 
- Thu Mar 30, 2017 3:59 pm
- Replies 9
- Views 8986
OC 2.2.0.0 SQL injection attack?
I have a client running a simple OC 2.2.0.0 installation which has been hacked. The hackers inserted links of the form: <script data-cfasync=\'false\' type=\'text/javascript\' src=\'//spam.delivery.domain1.com/blah.php\'></script><script type=\"text/javascript\" src=\"//spam.delivery....
Jump to post- Wed Mar 29, 2017 8:19 pm
- Replies 9
- Views 8986
How to find multi-store compatible themes
I am researching 2.3.x multi store compatible themes for a client. I am finding it very difficult to make a shortlist as there is no "multi store" filter on opencart.com, or indeed on the theme makers' sites. Can anyone recommend a theme designer who makes multi store compatible themes, or...
Jump to post- Fri Nov 11, 2016 5:26 pm
- Replies 1
- Views 2179
Re: Extension Manager missing from Dashboard
I have this same problem - did you find a solution?
[Edit] Doh! I'd just completed an upgrade and forgotten to update my permissions in Admin > User Groups > Administrator. Enabling the permissions makes the Extensions manager appear.
- Fri Nov 11, 2016 12:27 am
- Replies 1
- Views 1040
Re: HELP: Worldpay gateway configuration problem
If it helps anyone, I made a post detailing which files to copy over to enable the WorldPay Business Gateway for newer versions of OpenCart.
Jump to post- Thu Feb 18, 2016 1:34 am
- Replies 25
- Views 6702
OpenCart 2.0 upgrade script not updating database
I have just performed a test upgrade of from 1.5.3.1 to 2.0.0.0. There are definitely issues with the upgrade script, specifically it is not updating the database with the new tables/fields required for 2.0. You will get errors like the following in your error.txt log: 2014-10-07 23:17:52 - PHP Noti...
Jump to post- Thu Oct 09, 2014 4:09 pm
- Replies 1
- Views 1374
Re: Moving column_right in product.tpl
Wow, this is a non-trivial problem. It's easy enough to achieve for a 3 column layout in product.tpl by setting #content div to have a fixed width in the stylesheet and floating it to the left. But that then breaks the layouts for 2 column and 1 column pages (such as information and checkout pages)....
Jump to post- Fri Mar 22, 2013 9:56 pm
- Replies 1
- Views 1112
Moving column_right in product.tpl
The current layout in product.tpl is <div id="header">...</div> <div id="column-left">...</div><div id="column-right">...</div> <div id="content">...</div> <div id="footer">...</div> I wish to change the layout so that the content div comes before th...
Jump to post- Wed Mar 20, 2013 7:58 pm
- Replies 1
- Views 1112
Taking payment on dispatch
We sell products (guitars) which are often made to order. This can mean a couple of weeks up to several months between the customer ordering and the product being ready for dispatch. Having the customer pay up front creates problems particularly when the suppliers can't deliver when they said they c...
Jump to post- Fri Mar 15, 2013 8:56 pm
- Replies 0
- Views 698
Re: Product Filters enhancements
I absolutely agree, this feature is almost unusable in its current form. I don't understand the reasoning for using a new type of field instead of product attributes, as filters just needlessly doubles the workload in managing these. Also, I think the module, if enabled, should display all filters/a...
Jump to post- Mon Mar 11, 2013 6:18 pm
- Replies 7
- Views 3109
Re: Filtering product by few tags
I am also looking for this function. Did you have any luck solving it watanabe?
Edit: Thinking about this, what is required is a boolean search i.e. search for "tag1 AND tag2". I can't find an advanced search extension which does boolean operators though.
- Fri Mar 08, 2013 9:23 pm
- Replies 3
- Views 588
Notification emails for customers / orders added in Admin
I would like to make use of the new (since 1.5.2) ability to add orders in the Admin backend, mainly so that we can take phone orders. However, when one adds a new customer in Admin > Sales > Customers > Insert and then adds the order in Admin > Sales > Orders > Insert, none of the standard notifica...
Jump to post- Wed Oct 03, 2012 5:32 pm
- Replies 1
- Views 263
Re: Integration with Point of Sale
PHP POS is now commercial but there is an open source version called Open Source Point of Sale at http://sourceforge.net/projects/opensourcepos/. OS POS has a pretty basic interface but is quite fully featured. Like OpenCart, it is written in PHP and uses mySQL. It also uses MVC architecture. I woul...
Jump to post- Thu Sep 27, 2012 1:52 am
- Replies 48
- Views 34009
Re: Can't Login to Customer Account 1.5.2.1
Hi Steve I am experiencing the same thing on 1.5.3 with Safari. I can log a customer in fine with Chrome (although there is no indication in the admin page that they are logged in - when you open the site in a new tab they have been logged in). This is annoying as the site owner uses Safari to manag...
Jump to post- Wed Sep 26, 2012 6:02 pm
- Replies 3
- Views 1060
Re: Removing AJAX from product tabs
Ah, I found the change I made: I had mistakenly used $reviews as an array in product.php which was overwriting the text string $reviews containing the number of reviews. Here is the corrected vqmod: <modification> <id>Make User Reviews Indexable</id> <version>1.0.0</version> <vqmver>2.1</vqmver> <au...
Jump to post- Thu Jul 19, 2012 10:51 pm
- Replies 30
- Views 9719
Re: Removing AJAX from product tabs
I also had the "Array" error but I can't remember what I did to fix it - the variable is incorrectly typed for some reason. Look for this line in product.tpl: <a onclick="$('a[href=\'#tab-review\']').trigger('click');"><?php echo $reviews; ?></a> Is it the same in your code?
Jump to post- Thu Jul 19, 2012 4:56 pm
- Replies 30
- Views 9719
Re: Canonical URLs and page titles / internal links
And REMEMBER, do NOT use "Related Products" as it causes multiple search engine listings because the search engines do not recognize the Ajax tabs, and index the "Related Products" as well as the desired products on the product pages. I think there are some big misconceptions be...
Jump to post- Mon Jul 09, 2012 4:40 pm
- Replies 51
- Views 65948
