Generate an e-mail on page-not-found (404) errors [support thread]

Quote:

---

Originally Posted by lat9

relish, there are two possibilities:

1. Did you update your store's root .htaccess file to contain

Code:

---

ErrorDocument 404 /index.php?main_page=page_not_found

---

2. If you did, then it's possible that the /secure access is generating a 403 (permission error) rather than a 404 (not found) error. You can force the plugin to send emails in this case, too, by updating your .htaccess file to contain the following as well

Code:

---

ErrorDocument 403 /index.php?main_page=page_not_found

---

---

Thanks boss !

Though we have not updated the .htaccess file , we are getting the queries which generate 404 error:

Quote:

---

A user at host address [pluto.hostonwin.com] with IP address
[206.72.195.228] generated a 404 using the query string
[/index.php?main_page=shippinginfo/extras/ipn_test_return.php].


A user at host address [117.198.89.34] with IP address [117.198.89.34]
generated a 404 using the query string [/index.php?main_page=login3].

A user at host address [mail.it-security-center.ru] with IP address
[93.158.114.134] generated a 404 using the query string
[/index.php?main_page=products_new/extras/curltest.php].

A user at host address [mail.nap.websolute.com.br] with IP address
[200.150.205.30] generated a 404 using the query string
[/index.php?main_page=shippinginfo/extras/curltest.php].

A user at host address [mail.nap.websolute.com.br] with IP address
[200.150.205.30] generated a 404 using the query string
[/index.php?main_page=specials/admin/file_manager.php/login.php].

---

I think they are hacking attempts , could that be true ?
Our ZC installation is 1.5 and the security guidelines has been followed as per the guide posted on ZC tutorials (http://www.zen-cart.com/wiki/index.p...ecommendations).
Is there anything to worry about? Will be helpful if anybody could elaborate

Thanks

relish, what you're seeing are probes from people trying to exploit weaknesses in previous versions of Zen Cart (I've seen the same on various stores) -- you should be fine with v1.5+ and following (as you said) those security guidelines. I usually just let them be, unless they start hogging my bandwidth. If that's the case, I update the top of the .htaccess file in the root of my store to include the additional IP address ... I've filled in two from your query:

Code:

---

# Block specific IP address ranges
order allow,deny
deny from 117.198.89.34
deny from 93.158.114.134
allow from all

---

Problem fixed

Hello,

Thanks for the great plugin,

here is how i get an email on error:

HTML Code:

---

A user at host address [112.111.174.12] with IP address [112.111.174.12]
generated a 404 using the query string
[/index.php?main_page=page_not_found].

---

Without the page which led to the error.

This is the content of my .htaccess file:

HTML Code:

---

ErrorDocument 404 /page_not_found.php

ErrorDocument 403 /page_not_found.php

---

Quote:

---

Originally Posted by ShopVille

Hello,

Thanks for the great plugin,

here is how i get an email on error:

HTML Code:

---

A user at host address [112.111.174.12] with IP address [112.111.174.12]
generated a 404 using the query string
[/index.php?main_page=page_not_found].

---

Without the page which led to the error.

This is the content of my .htaccess file:

HTML Code:

---

ErrorDocument 404 /page_not_found.php

ErrorDocument 403 /page_not_found.php

---

---

Try modifying your .htaccess file to read:

Code:

---

ErrorDocument 404 /index.php?main_page=page_not_found
ErrorDocument 403 /index.php?main_page=page_not_found

---

Quote:

---

Originally Posted by lat9

Try modifying your .htaccess file to read:

Code:

---

ErrorDocument 404 /index.php?main_page=page_not_found
ErrorDocument 403 /index.php?main_page=page_not_found

---

---

Works perfect now.

Thanks loads

While the current version in the plugins will "play nice" with Zen Cart v1.5.5, it needed a change for PHP 7.0 compliance (class constructor named __construct). v1.2.3 has been submitted to the plugins to correct this incompatibility.

I've just submitted v1.2.4 for the Zen Cart moderators' review and will post back here when it's available for download.

This version contains changes captured for GitHub issue #2. Language constants (and pseudo-configuration definitions) have been moved from the auto_loader to a language-based extra_definitions file.


The email report now includes the contents of the entire $_SERVER and $_SESSION values.

Quote:

---

Originally Posted by lat9

I've just submitted v1.2.4 for the Zen Cart moderators' review and will post back here when it's available for download.

This version contains changes captured for GitHub issue #2. Language constants (and pseudo-configuration definitions) have been moved from the auto_loader to a language-based extra_definitions file.


The email report now includes the contents of the entire $_SERVER and $_SESSION values.

---

Now available for download: https://www.zen-cart.com/downloads.php?do=file&id=1090

Quote:

---

Originally Posted by lat9

Now available for download: https://www.zen-cart.com/downloads.php?do=file&id=1090

---

I don't know how I got this far without knowing this mod exists. Perfect. YOU ROCK!