Post by kimbo » Thu Mar 12, 2015 3:38 am

default template OC1.5.5.1
Found a few PHP notices in my error log, this being one of them. Does not look like it belongs, any thoughts?

} else {
$this->data['config_template'] = $this->config->get('config_template');
}

$this->data['templates'] = array();

$directories = glob(DIR_CATALOG . 'view/theme/*', GLOB_ONLYDIR);

foreach ($directories as $directory) {
$this->data['templates'][] = basename($directory);
}
Thanks,

kimbo
The Chloelina All Natural Soap Co.
chloelina.com


Active Member

Posts

Joined
Thu Aug 29, 2013 10:02 pm

Post by chulcha » Thu Mar 12, 2015 4:50 am

In which file is the code?

Active Member

Posts

Joined
Fri Jul 18, 2014 4:39 pm

Post by kimbo » Thu Mar 12, 2015 5:55 am

chulcha wrote:In which file is the code?
Admin/controller/setting/setting.php line 413

kimbo
The Chloelina All Natural Soap Co.
chloelina.com


Active Member

Posts

Joined
Thu Aug 29, 2013 10:02 pm

Post by kimbo » Thu Mar 12, 2015 10:35 am

Now that I have a little more time to post details:
For the past three days I have been dealing with the route .php.jpg in downloads fiasco that others have experienced.
Blocked IP addresses, changed download name, deleted files.

This is what I found today: Notified host, they found nothing on the server, so far.
Anyone else dealing with this?

kimbo
The Chloelina All Natural Soap Co.
chloelina.com


Active Member

Posts

Joined
Thu Aug 29, 2013 10:02 pm

Post by Dhaupin » Fri Mar 13, 2015 6:02 am

That code is looking through the theme folders to understand what is installed. I don't think that in itself is risky... Perhaps one of your mods put it in. You should try to see what caused that code to be there.

The download folder hax is prob something different... Seems to plague alot of OPs. It seems to be something as simple as a product or something with an upload field...they just upload junk in hopes of free hosting. The OC downloads folder appends a random string to the file name though...not sure they are able to guess it unless of course your downloads dir lists it's contents.

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.


User avatar
Active Member

Posts

Joined
Tue May 13, 2014 3:45 am
Location - PA

Post by kimbo » Sat Mar 14, 2015 12:26 am

Duh, should have remembered: it is probably the VQMOD for the USPS shipping I bought from Jeffro DH, works great by the way.

Yes, Dhaupin, that download folder thing is a prob. I check the hacked download items, they were licenses. Before that, the others were the same route . jpg items that were (still are) circulating. Thanks to the extensive info sharing in the thread here in the forum, http://forum.opencart.com/viewtopic.php ... te+php+jpg I was able to fix it.

kimbo
The Chloelina All Natural Soap Co.
chloelina.com


Active Member

Posts

Joined
Thu Aug 29, 2013 10:02 pm
Who is online

Users browsing this forum: No registered users and 79 guests