Post by neil » Sat Oct 28, 2017 12:21 am

Hi

We have been using opencart v2.3.02 successfully for some time however a few months ago authorize.net started showing up on my payment methods even though this extension is not enabled, the only way I could get rid was to restore a backup but now it has reappeared.
Has anyone experienced this be for?

New member

Posts

Joined
Wed Aug 04, 2010 7:06 pm


Post by IP_CAM » Sat Oct 28, 2017 12:32 am

Yep ! This is a bad thing, you have, multiple topics exist on it, if you search Google:
https://www.google.com/search?q=Authori ... n+Opencart
Ernie

My Github OC Site: https://github.com/IP-CAM
5'600 + FREE OC Extensions, on the World's largest private Github OC Repository Archive Site.


User avatar
Legendary Member

Posts

Joined
Tue Mar 04, 2014 1:37 am
Location - Switzerland

Post by neil » Sat Oct 28, 2017 12:48 am

Hi Ernie
Yes I was reading one which said it's a hack, but looking at all the other posts I'm guessing it's more of a bug?
If it is a but why should it suddenly show up?

New member

Posts

Joined
Wed Aug 04, 2010 7:06 pm


Post by IP_CAM » Sat Oct 28, 2017 1:22 am

Well, an unknown Bug, rerouting sensitive User Data to third Party Addresses,
or even payments to unknown addresses, is not just a Bug, but a very dangerous
Situation, you could be legally hold responsible, if Customers Data would be
misused in such ways.

I don't know, why and where you got it, but considering the daily attack attempts
on my Test Servers prove, that Opencart Sites are under a steady attacks, and
those, also using Wordpress and other Progs on the same Server, are in real danger,
as it looks.

I would download the entire Software, and make a FULL Copy of the DB, by use of
the SERVER Admin Tools. And then, compare the Shop Server Content with a Copy
on your local PC, to exactly find out, where what has been changed.

To check the DB will be another timeconsuming matter, it contains also the OcMod-related
Content, also check on this, as well as in the Payment related Sections.

Also check the OC System - Extension/Modification/ Sections, if some Code has been
placed in some 'temporary' Sections, usually temporarely built when uploading OcMods,
and still exist, due to failed install-attempts. And better don't leave anything in that
Extension/Modification Shop Sub, exept for its empty index.html file, delete it and create
one again, and then upload your cleaned-out, or better, a clean new Copy, including the
existing old config.php Files and .htaccess, with all Images (not the cached ones ;))
to then be sure, that everything is in order again.

But it's just an advise, you don't have to follow. :D
Good Luck!
Ernie

My Github OC Site: https://github.com/IP-CAM
5'600 + FREE OC Extensions, on the World's largest private Github OC Repository Archive Site.


User avatar
Legendary Member

Posts

Joined
Tue Mar 04, 2014 1:37 am
Location - Switzerland

Post by neil » Sat Oct 28, 2017 2:56 am

sound lovely Ernie can't wait thanks.
😁

New member

Posts

Joined
Wed Aug 04, 2010 7:06 pm

Who is online

Users browsing this forum: No registered users and 2 guests