User tracking mod

Yes, considering that I see those type entries and others that are historically known to allow some form of sql injection (in older versions of ZC), I would suspect that those using this mod would see something similar.

So, with that in mind, my thought of approach is to create an admin configuration field, in which a portion of the string to cause the individual to be ignored would be entered.
Then, another on screen option to either show or hide or only show those "visitors", but in any case to provide an indicator for each such visitor that they used one of the "key" words.

This way, a review could be performed to see all traffic, all traffic that doesn't include that text or to look through all traffic of those that have tried that or similar.

How's that sound to you (and others)?

Quote:

---

Originally Posted by mc12345678

Yes, considering that I see those type entries and others that are historically known to allow some form of sql injection (in older versions of ZC), I would suspect that those using this mod would see something similar.

So, with that in mind, my thought of approach is to create an admin configuration field, in which a portion of the string to cause the individual to be ignored would be entered.
Then, another on screen option to either show or hide or only show those "visitors", but in any case to provide an indicator for each such visitor that they used one of the "key" words.

This way, a review could be performed to see all traffic, all traffic that doesn't include that text or to look through all traffic of those that have tried that or similar.

How's that sound to you (and others)?

---

That sounds fantastic and would work awesome. I'm glad I could communicate the problem effectively, as seeing all those hack attempts in between the real customer visits kinda messes up the activity report. If it's hidden then I can see the big benefit. Great idea!

Quote:

---

Originally Posted by Nitroedge

That sounds fantastic and would work awesome. I'm glad I could communicate the problem effectively, as seeing all those hack attempts in between the real customer visits kinda messes up the activity report. If it's hidden then I can see the big benefit. Great idea!

---

So I have this operational, I've chosen a few things to modify the "display", but I'd be glad to take others input for modification. Right now, a word is added in front of the "name" of the searcher (Guest or logged in individual) also there should be some color change made to parts of the row.

While the genesis of this feature was to eliminate the presentation of records for users "testing" the site, the feature also allows filtering for other reasons (to show records of users getting to a particular web-page, etc..). Filter "words" are to be comma separated and suggest using whatever is displayed when looking at the UT admin screen.

I have updated the github location but also have submitted the plugin to ZC with the following modifications identified:

Quote:

---

* Version 1.5.5:
* - Removed HTML that was in the middle of PHP code.
* - Moved Admin menu option "name" to the languages folder to support multiple languages.
* - Improved sanitization for catalog and store side data capture.
* - Made radio labels clickable to support radio button activation.
* - Added feature to filter URL information that was captured when the site was visited.
* - Added default settings to the top of the admin/user_tracking.php file.
* - Removed unused code/variables in the two detection files.
* - Updated version compare software to latest available in the ZC 1.5.5 series (not identified yet to a specific version)

---

Once reviewed and accepted should be available from here.

That is awesome and thanks!

Sorry I can't find the github location, could you post it again or point me in the right direction?

Quote:

---

Originally Posted by Nitroedge

That is awesome and thanks!

Sorry I can't find the github location, could you post it again or point me in the right direction?

---

User Tracking on github can be found here.

Got it, since my mod is working with my Zen Cart v1.51, should I just FTP overwrite all the files with the new files?

I don't need to do any install script or similar?

Just overwrite and I'll have the new features for filter words etc?

Quote:

---

Originally Posted by Nitroedge

Got it, since my mod is working with my Zen Cart v1.51, should I just FTP overwrite all the files with the new files?

I don't need to do any install script or similar?

Just overwrite and I'll have the new features for filter words etc?

---

That's the expectation. Please report if that doesn't work, issues identified, and if had to work through something related to please identify the solution that worked. Or if no issues, would appreciate report back that worked and possibly other system conditions that may seem obscure or edge case (low/high PHP version, old ZC version, etc...)

Not entirely sure what's going on with the latest user tracking mod in ZC 1.5.5, but working properly is not happening. First of all the auto install doesn't create a database table called user_tracing, it doesn't create a config menu option and it doesn't create a tools menu option.

I ran the create user_tracking table function by planting it into a define page and loading the define page. Then the readme file says to add <?php $zco_notifier->notify('NOTIFY_FOOTER_END'); ?> to the end of the tpl_main_page.php file which doesn't make much sense as that call already exists there, but adding a call to the function zen_update_user_tracking(); does work. However, while this function call does get records added to the database table, the .com/admin/user_tracking.php still doesn't show any of those records. Just blank records area. User tracking back in the day had some issues, but this is crazy.

Quote:

---

Originally Posted by bumba000

Not entirely sure what's going on with the latest user tracking mod in ZC 1.5.5, but working properly is not happening. First of all the auto install doesn't create a database table called user_tracing, it doesn't create a config menu option and it doesn't create a tools menu option.

I ran the create user_tracking table function by planting it into a define page and loading the define page. Then the readme file says to add <?php $zco_notifier->notify('NOTIFY_FOOTER_END'); ?> to the end of the tpl_main_page.php file which doesn't make much sense as that call already exists there, but adding a call to the function zen_update_user_tracking(); does work. However, while this function call does get records added to the database table, the .com/admin/user_tracking.php still doesn't show any of those records. Just blank records area. User tracking back in the day had some issues, but this is crazy.

---

Sounds like an incomplete install/upload of files.

The note about adding a notifier to the includes/templates/YOUR_TEMPLATE/common/tpl_main_page.php file is related to pre-ZC 1.5.5 because it is in ZC 1.5.5 that the notifier was added. There is the possibility that a newer template could have been installed to an older system that already had that line in it and yes the instruction would then be incorrect. It will be updated to indicate to add the line if it does not already exist.

As to no action being taken even with its presence, but calling the function seems to work AND that the notifier has already been identified as being present implies that the includes/auto_loaders and/or includes/classes/observers related file(s) have not been put to the server at least in the expected location(s).

I suggest also performing a search using the tools->developers tool kit for init_user_tracking and identifying the path(s) to the search response. Obscure the directory name for YOUR_SECRET_ADMIN directory if/when presented.

As to the lack of table and/or admin menu options in relation to the discussion of an older User Tracking installation, what is the history of the database to which this was installed? Had it previously had User tracking installed? It may be a good idea to run the uninstall sql to ensure removal of old partial remnants. A lot of effort went into Version 1.5.3 to try to convert previous installations to using this more standardized installer primarily so that the user_tracking table didn't get wiped out every time a new version was presented. There hasn't been a change to the table in a very long time, so there doesn't seem to be a need to delete it when other features are added/modified.

I checked uploaded files against all included in download. All files were uploaded.

public_html/shop/my_super_secret_admin_location/includes/auto_loaders/config.user_tracking_install.php

there was no previous installation as this is a fresh install.

Also, as stated previously. The responsive_classic template in use already includes the $zco_notifier->notify('NOTIFY_FOOTER_END', $current_page); mentioned in the installation_readme.txt file. It does not populate the user_tracking db table, but calling the function zen_update_user_tracking(); works as it always has.