User tracking mod

Good morning,

I am using zen-cart on a site that does not receive purchases, but it is convenient to use ZC since it has a great user interface. Thus, I am still using 1.3.8a, and php version 5.2.17. I have not upgraded the site recently. There are some add-ons that we use, such as user tracking, sitemap, and seo urls. The issue I am having is not exactly an issue, more of a question about this plug-in specifically.

I use godaddy as my hosting provider, and they have a limit on database sizes of 200mb. I think they have changed it recently to make the amount of available space higher, but I am not sure (their tech support person told me they have removed this limit). This user tracking mod appears to be able to only write to the database. Since I have several bots that visit the site, and there is no way to block tracking on every one since their ip addresses change regularly, the user tracking database file grows quite large. I am not sure what version of this module I am using, since I can't find where it says the version in either the config page or the tracking page. I believe it was a version that was installed in 2009, so it is either version 1.3.6.2 or 1.4.0.

What I am wondering is, is there a way to cause the module to write the data to a file on the server instead of to the database? Does the new version do this, as opposed to writing to the database? I cannot find a way to change this aspect of the module in the configuration section. If I purge all the records in the last 72 hour period, then I would lose the data for the visitors in that period. So, I am simply looking for a way to make the database stop growing. I did not see writing to the database mentioned as something that was changed in later versions, so I am wondering if that was something that is different now. If it is a simple fix such as this, I will install the new version right away.

Alternatively, is there a different module that would work more in the way that I have mentioned? Any help on this matter is appreciated. Thank you.

For what it's worth (FWIW) the most recently posted version is not the one that contains other improvements, one of which is that the deletion period is customizable by date/tme (not size of table) in the format of delete everything that is beyond x hours/days/weeks/months in the past... There is also a swtch to change how/when to log (does not provide a file version of this) as discussed in the past and in some of the documentation provided in various versions of the plugin.

The plugin as it stands two versions ago should be compatible with your version of ZC as well as with ZC 1.5.4. Thing is I botched the instructions (SQL) for new users (though I thought a corrected version was eventually published). A somewhat revised version using post commands instead of get commands was provided for further development; however, other priorities have gotten in the way of further development. One additional feature considered for addition was to autodelete historical information at a point independent of the manual method (with expectation of it being further in the past than the manual setting.)

As for a file download of the table, while not "easy" it can be done through phpmyadmin as well as through other backup utilities available as plugins...

I recently got my site back and I am trying to be on top of my logs and found this:

Code:

---

[23-Mar-2016 09:02:36 America/Denver] PHP Fatal error:  1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'A=0&products_id=741', 'White Diamonds Scented Gel Candle - 120 Hour Deco Jar', '' at line 1 :: insert into user_tracking (customer_id, full_name, session_id, ip_address, time_entry, time_last_click, last_page_url, referer_url, page_desc, customers_host_address) values ('0', 'Guest', '', '98.226.154.95', '1458745356', '1458745356', '/index.php?main_page=product_info\'A=0&products_id=741', 'http://gelcandlecompany.com/index.php?main_page=product_info'A=0&products_id=741', 'White Diamonds Scented Gel Candle - 120 Hour Deco Jar', 'c-98-226-154-95.hsd1.il.comcast.net') ==> (as called by) /xxxxx/xxxxx/public_html/includes/functions/extra_functions/user_tracking.php on line 70 <== in /xxxxx/xxxxx/public_html/includes/classes/db/mysql/query_factory.php on line 155

---

Quote:

---

Originally Posted by spawnie69

I recently got my site back and I am trying to be on top of my logs and found this:

Code:

---

[23-Mar-2016 09:02:36 America/Denver] PHP Fatal error:  1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'A=0&products_id=741', 'White Diamonds Scented Gel Candle - 120 Hour Deco Jar', '' at line 1 :: insert into user_tracking (customer_id, full_name, session_id, ip_address, time_entry, time_last_click, last_page_url, referer_url, page_desc, customers_host_address) values ('0', 'Guest', '', '98.226.154.95', '1458745356', '1458745356', '/index.php?main_page=product_info\'A=0&products_id=741', 'http://gelcandlecompany.com/index.php?main_page=product_info'A=0&products_id=741', 'White Diamonds Scented Gel Candle - 120 Hour Deco Jar', 'c-98-226-154-95.hsd1.il.comcast.net') ==> (as called by) /xxxxx/xxxxx/public_html/includes/functions/extra_functions/user_tracking.php on line 70 <== in /xxxxx/xxxxx/public_html/includes/classes/db/mysql/query_factory.php on line 155

---

---

Yup, that's someone trying to take advantage of an old style SQL injection attack that has been caught... They were trying to cause the SQL to close out/crash and then perform some action. Problem/potential attack thwarted by the security of ZC.

Hell No! Amazing, glad to finally upgrade to 1.54.
Thank you guys!

spawnie69 and mc12345678, would you be willing to test out these updates to verify that I've not broken anything while cleaning it up a bit (okay, a lot)?

Quote:

---

Originally Posted by DrByte

spawnie69 and mc12345678, would you be willing to test out these updates to verify that I've not broken anything while cleaning it up a bit (okay, a lot)?

---

Before downloading, may I ask which version was used as a "template" if any at all? As identified earlier in this thread, the most "recent" upload was nothing new but was actually from years ago with a correctly formatted install SQL for new users...

Sigh.

I used this: https://www.zen-cart.com/downloads.php?do=file&id=159

And I didn't touch the install SQL file.

I didn't incorporate any code changes posted in this thread, as I haven't studied the 700 previous posts here.
I did observe that there are probably a number of things in the admin pages of this plugin that could probably use improving. I did touch those just to fix some potential sanitization issues and HTML markup errors, and PHP compatibility issues.

Quote:

---

Originally Posted by DrByte

I used this: https://www.zen-cart.com/downloads.php?do=file&id=159

And I didn't touch the install SQL file.

I didn't incorporate any code changes posted in this thread.

---

That's what I was afraid of. Please read the following and adjacent posts. https://www.zen-cart.com/showthread....13#post1276013

Guess I have nothing to complain about seeing as I didn't take further action to fix the overall issue even when a slightly reworked version was otherwise provided. Ohh well. Moving on. Will see what there is to see related to above expecting to be both happy and disappointed at the same time.

Quote:

---

Originally Posted by DrByte

spawnie69 and mc12345678, would you be willing to test out these updates to verify that I've not broken anything while cleaning it up a bit (okay, a lot)?

---

Took a lap through comparing to the version posted two versions ago. Geo data is way out-of-date (instructions to obtain newer files are/were in the second to newest version), get statements are used throughout instead of the POST statements that had been developed/applied, I'll continue looking through and merging back into the code what didn't exist in that recently uploaded old version, without affecting the improved data capture.

The url field length I think it was was extended to 255 characters and the storage function uses 253 characters presumably to permit escaping the content. One thing that I had been concerned about was the potential of that string having some form of escape inside of it (ie. Is/was it possible), in looking at how the code had been previously rewritten, seemed like the storage "function" (SQL) was in a sequence considered more secure. Now I'm writing this 2 days following my review, so please take this concern with a grain of salt.

Otherwise I did see a few discrepancies with things like quoted commands/text and function sequences that were addressed correct in the 2 versions ago software that I'm working on. Then there is the fact that torvista had reworked the plugin to use all post features though one thing to investigate in this is if the presentation of product in a cart will display the cart adjacent to all history for that day versus the one individual's cart being applied to every entry. (Feature improvement.)

Please let me know if this module is compatible with zc 1.5.5

thank you

Posted an updated version of this plugin, version 1.5.3 which upon review and acceptance should be available from here:

Update summary:

Code:

---

Updated 02/23/2017 Version 1.5.3 mc12345678:
1. Implemented an installation/upgrade script instead of expecting users to try to successfully run the installation sql and to
remove the need of clearing the database of existing records when performing an update that does not modify the records table.
2. Tightened security controls on the plugin by using focused database entry/record sanitization as well as output control to
reduce the likelihood of script being executed by display of attempted url.  The captured session data only includes what is needed
to support the desired information to be displayed.
3. Updated code to be php 7.2 compliant based on reported deprecation of the each() function.
4. Modified the cart content display to provide cart data adjacent only to the record applicable to that cart.
5. Added a filter to show records that meet a minimum number of hits for that session.
6. Moved some standard html table code into using the default admin ZC table style code.
7. Converted the submit button to a post style submission instead of a get format.
8. Incorporated additional cod changes suggested by torvista as well as DrByte's most recent in forum posted version.
9. Basically restored the code back to the condition it was in at version 1.5.1.
10. Added the day forward/backward at the bottom of the page (so not just at the top).
11. Updated the geoip.dat file to the February 2017 version.

---

Code was tested on up to ZC 1.5.5 and PHP 7.0.

Quote:

---

Originally Posted by mc12345678

Posted an updated version of this plugin, version 1.5.3 which upon review and acceptance should be available from here:

Update summary:

Code:

---

Updated 02/23/2017 Version 1.5.3 mc12345678:
1. Implemented an installation/upgrade script instead of expecting users to try to successfully run the installation sql and to
remove the need of clearing the database of existing records when performing an update that does not modify the records table.
2. Tightened security controls on the plugin by using focused database entry/record sanitization as well as output control to
reduce the likelihood of script being executed by display of attempted url.  The captured session data only includes what is needed
to support the desired information to be displayed.
3. Updated code to be php 7.2 compliant based on reported deprecation of the each() function.
4. Modified the cart content display to provide cart data adjacent only to the record applicable to that cart.
5. Added a filter to show records that meet a minimum number of hits for that session.
6. Moved some standard html table code into using the default admin ZC table style code.
7. Converted the submit button to a post style submission instead of a get format.
8. Incorporated additional cod changes suggested by torvista as well as DrByte's most recent in forum posted version.
9. Basically restored the code back to the condition it was in at version 1.5.1.
10. Added the day forward/backward at the bottom of the page (so not just at the top).
11. Updated the geoip.dat file to the February 2017 version.

---

Code was tested on up to ZC 1.5.5 and PHP 7.0.

---

Version 1.5.3 of this plugin is now available from here.

I installed User Tracking today on version 1.5.5b. The green "Installed User Tracking v1.5.3" banner won't go away even with a page refresh or using a different browser. What can be done to make that disappear?

Quote:

---

Originally Posted by hannahheart

I installed User Tracking today on version 1.5.5b. The green "Installed User Tracking v1.5.3" banner won't go away even with a page refresh or using a different browser. What can be done to make that disappear?

---

Knew I should have put this on github to make it easier to do a code review.

I'm inclined to say that the full contents of the installer file did not get uploaded. Recommend reuploading the files.

Has the module actually successfully installed (ie. An option present in the configuration menu to support making changes?) and/or an option under tools to access the program?

I uploaded the latest version, it seems like the upgrade script is not being processed any ideas?

Quote:

---

Originally Posted by ShopVille

I uploaded the latest version, it seems like the upgrade script is not being processed any ideas?

---

Humorous to me that the last two posts relate to the installer script providing two opposing conditions, won't stop and won't start. :)

What is the indication that it has not gotten installed? If it has been installed, there should be a configuration section for User Tracking and the version number identified there should be 1.5.3.

1) all files and folders from admin directory placed into admin directory keeping the folder structure?
2) specific files involved with installer are located in the admin/includes/auto_loaders, admin/includes/init_includes, and admin/includes/installers/user_tracking directories.
3) suggest attempting to re-upload the files at least in the admin directory.

Quote:

---

Originally Posted by mc12345678

Humorous to me that the last two posts relate to the installer script providing two opposing conditions, won't stop and won't start. :)

What is the indication that it has not gotten installed? If it has been installed, there should be a configuration section for User Tracking and the version number identified there should be 1.5.3.

1) all files and folders from admin directory placed into admin directory keeping the folder structure?
2) specific files involved with installer are located in the admin/includes/auto_loaders, admin/includes/init_includes, and admin/includes/installers/user_tracking directories.
3) suggest attempting to re-upload the files at least in the admin directory.

---

This is a screenshot of the config does not look like it is updated
Attachment 16998

As a former user of User Tracking, try this change though at the moment, I'm not sure that it will resolve the issue if the other suggestions haven't been followed.

In admin/includes/init_includes/init_user_tracking.php

Find this line:

Code:

---

if ($configuration_group_id == '') {

---

And replace with:

Code:

---

if (!zen_not_null($configuration_group_id)) {

---

Quote:

---

Originally Posted by mc12345678

As a former user of User Tracking, try this change though at the moment, I'm not sure that it will resolve the issue if the other suggestions haven't been followed.

In admin/includes/init_includes/init_user_tracking.php

Find this line:

Code:

---

if ($configuration_group_id == '') {

---

And replace with:

Code:

---

if (!zen_not_null($configuration_group_id)) {

---

---

Nothing changed

Yeah, realized after posting that suggestion that the line requested to be changed actually is there because of previous installs may not have put the configuration options under the configuration menu dropdown and instead are reflected in the older tools->User Tracking config area.

So, it more seems like it needs to be identified if the installer file(s) are even getting accessed.

What if any error logs are being generated?

Again, in the includes/init_includes/init_user_tracking.php file, please add the following somewhere after the opening <?php and not within a commented out portion of text, try entering:

Code:

---

trigger_error('in this file', E_USER_WARNING);

---

Access one admin related page, then remove that line of code from the file. Check your logs directory to see if the file is loading. If it is, then in a way, want to place that line of code in different locations of the file (could do so all at once), and again access the admin by one page change, review the logs to see where in the code processing "stopped".

Another question: what files do you have in admin/includes/auto_loaders and when looking in each of those, what is the number within each of the square parentheses? It may be that the one for the user_tracking_install file needs to be a smaller number suggested to be no less that 180. (instead of 999)

Thanks for your help, none of your solutions worked, what I did it since i was coming from a really old version I downloaded one version in between then upgraded to that one and then to the latest, it seems like it worked but here:
Attachment 17000
Am i supposed to see the cart data?

Also i still get this message:
Attachment 17001

Quote:

---

Originally Posted by ShopVille

Thanks for your help, none of your solutions worked, what I did it since i was coming from a really old version I downloaded one version in between then upgraded to that one and then to the latest, it seems like it worked but here:
Attachment 17000
Am i supposed to see the cart data?

Also i still get this message:
Attachment 17001

---

Also, when clicking [view session] it shows a grey bar and does not expand the session

Quote:

---

Originally Posted by ShopVille

Thanks for your help, none of your solutions worked, what I did it since i was coming from a really old version I downloaded one version in between then upgraded to that one and then to the latest, it seems like it worked but here:
Attachment 17000
Am i supposed to see the cart data?

Also i still get this message:
Attachment 17001

---

For some reason the second attachment doesn't appear to be "visible" for viewing, but is included in the above quoted text. I'm hoping that it will appear in this response. So until that is made clear, I can't respond.

In relation to the first image about the "shopping cart", what you are seeing is that when tracking admin action using User Tracking, there is no cart really associated, but there is still at least some level of information about the individual. In this case, instead of leaving the field blank, the concept considered was to identify what "authority" the individual being tracked while logged into the admin panel had. That is the information that you are seeing/describe.

Quote:

---

Originally Posted by ShopVille

Also, when clicking [view session] it shows a grey bar and does not expand the session

---

What version of ZC is being used, how many "visits" we're reported for that user, and what type of user was being clicked on to view session data (store or admin)?

hi there, i have been using plugin and works perfect but i cant get rid of the information from the install at the top of admin screen, its been there for weeks, im using zen cart 1.5.5.e cheers
Attachment 17083

Quote:

---

Originally Posted by jaydamuss

hi there, i have been using plugin and works perfect but i cant get rid of the information from the install at the top of admin screen, its been there for weeks, im using zen cart 1.5.5.e cheers
Attachment 17083

---

Pretty obvious that something about the installer needs to be modified. Could you identify your (recent) history of use of User Tracking? Ie. Is this the first time it has ever been installed or could you identify from what version it was updated?

Where I have more recently used that installer "method" I've added in a little more direct control of the sequence of files rather than expecting them to have already been sorted in one way or another.

Quote:

---

Originally Posted by mc12345678

Pretty obvious that something about the installer needs to be modified. Could you identify your (recent) history of use of User Tracking? Ie. Is this the first time it has ever been installed or could you identify from what version it was updated?

Where I have more recently used that installer "method" I've added in a little more direct control of the sequence of files rather than expecting them to have already been sorted in one way or another.

---

thanks for your reply, this is a new install not updated on the new site, it happend the first time i installed it but i have left it for a couple of weeks as everything seems to be woring fine, hope this helps

Quote:

---

Originally Posted by jaydamuss

thanks for your reply, this is a new install not updated on the new site, it happend the first time i installed it but i have left it for a couple of weeks as everything seems to be woring fine, hope this helps

---

And to be sure about the "new install" part, the database contents are brand spanking new, not copied over, imported or otherwise left over from any previous ZC install nor has ever been exposed to the User Tracking plugin? (While I still believe the issue is at least in part related to the file sequence, I can't yet rule out that there might be something missed in the logic of handling the database in an upgrade condition from some "ancient" version that doesn't fit into the mold I believe should work.) I'll try to prep a little code change for the admin/includes/init_includes file and would appreciate if the change could be incorporated and validated to prevent the continuous notification that it has been installed. And if that works maybe I should submit an update to the installer from which that is based or at least talk with the author.

Here is my proposal for the issue described, though I haven't been able to reproduce the issue on a clean nor upgraded site. Would appreciate feedback.

in admin/includes/init_includes/init_user_tracking.php

Locate this portion of the code:

Code:

---

$installers = scandir($module_installer_directory, 1);

$file_extension = substr($PHP_SELF, strrpos($PHP_SELF, '.'));

while (substr($installers[0], strrpos($installers[0], '.')) != $file_extension || preg_match('~^[^\._].*\.php$~i', $installers[0]) <= 0 || $installers[0] == 'empty.txt') {
  unset($installers[0]);
  if (sizeof($installers) == 0) {
    break;
  }
  $installers = array_values($installers);
}


if (sizeof($installers) > 0) {
    $newest_version = $installers[0];
    $newest_version = substr($newest_version, 0, -4);

    sort($installers);
    if (version_compare($newest_version, $current_version) > 0) {
        foreach ($installers as $installer) {
            if (substr($installer, strrpos($installer, '.')) == $file_extension && (preg_match('~^[^\._].*\.php$~i', $installer) > 0 || $installer != 'empty.txt')) {
                if (version_compare($newest_version, substr($installer, 0, -4)) >= 0 && version_compare($current_version, substr($installer, 0, -4)) < 0) {
                    include($module_installer_directory . '/' . $installer);
                    $current_version = str_replace("_", ".", substr($installer, 0, -4));
                    $db->Execute("UPDATE " . TABLE_CONFIGURATION . " SET configuration_value = '" . $current_version . "', set_function = 'zen_cfg_select_option(array(\'" . $current_version . "\'),' WHERE configuration_key = 'CONFIG_" . $module_constant . "_VERSION' LIMIT 1;");
                    $messageStack->add("Installed " . $module_name . " v" . $current_version, 'success');
                }
            }
        }
    }
}

---

And modify/replace to like the below (with code that causes a difference highlighted in red):

Code:

---

// Obtain a list of files in the installer directory.
if (is_dir($module_installer_directory)) {
  $installers = scandir($module_installer_directory, 1);
  // Determine the extension of this file to be used for comparison on the others.
  $file_extension = substr($PHP_SELF, strrpos($PHP_SELF, '.'));
  $file_extension_len = strlen($file_extension);
  // sequence the installer files to support stepping through them.
  if (sizeof($installers) > 0) {
    sort($installers);
  }
  // Step through each installer file to establish the first file that matches the search criteria.
  $newest_version = $installers[0];
  $newest_version = substr($newest_version, 0, -1 * $file_extension_len);
  while (substr($installers[0], strrpos($installers[0], '.')) != $file_extension || preg_match('~^[^\._].*\.php$~i', $installers[0]) <= 0 || $installers[0] == 'empty.txt' || version_compare($newest_version, $current_version) <= 0) {
    unset($installers[0]);
    if (sizeof($installers) == 0) {
      break;
    }
    $installers = array_values($installers);
    $newest_version = $installers[0];
    $newest_version = substr($newest_version, 0, -1 * $file_extension_len);
  }
  // If there are still installer files to process, then do so.
  if (sizeof($installers) > 0) {
      $newest_version = $installers[0];
      $newest_version = substr($newest_version, 0, -1 * $file_extension_len);
      if (version_compare($newest_version, $current_version) > 0) {
          foreach ($installers as $installer) {
              if (substr($installer, strrpos($installer, '.')) == $file_extension && (preg_match('~^[^\._].*\.php$~i', $installer) > 0 || $installer != 'empty.txt')) {
                  if (version_compare($newest_version, substr($installer, 0, -1 * $file_extension_len)) >= 0 && version_compare($current_version, substr($installer, 0, -1 * $file_extension_len)) < 0) {
                      include($module_installer_directory . '/' . $installer);
                      $current_version = str_replace("_", ".", substr($installer, 0, -1 * $file_extension_len));
                      $db->Execute("UPDATE " . TABLE_CONFIGURATION . " SET configuration_value = '" . $current_version . "', set_function = 'zen_cfg_select_option(array(\'" . $current_version . "\'),' WHERE configuration_key = '" . $module_constant . "_VERSION' LIMIT 1;");
                      $messageStack->add("Installed " . $module_name . " v" . $current_version, 'success');
                  }
              }
          }
      }
  }
}

---

Quote:

---

Originally Posted by mc12345678

And to be sure about the "new install" part, the database contents are brand spanking new, not copied over, imported or otherwise left over from any previous ZC install nor has ever been exposed to the User Tracking plugin? (While I still believe the issue is at least in part related to the file sequence, I can't yet rule out that there might be something missed in the logic of handling the database in an upgrade condition from some "ancient" version that doesn't fit into the mold I believe should work.) I'll try to prep a little code change for the admin/includes/init_includes file and would appreciate if the change could be incorporated and validated to prevent the continuous notification that it has been installed. And if that works maybe I should submit an update to the installer from which that is based or at least talk with the author.

---

yes the database and site was new a couple months ago and not transfered cheers

Quote:

---

Originally Posted by jaydamuss

yes the database and site was new a couple months ago and not transfered cheers

---

Thanks for the clarification. Able to test the above code modification and post result?

Quote:

---

Originally Posted by mc12345678

Thanks for the clarification. Able to test the above code modification and post result?

---

yes i just copied your second code between lines 49-79 and the info is still there cheers

Quote:

---

Originally Posted by jaydamuss

yes i just copied your second code between lines 49-79 and the info is still there cheers

---

I didn't catch the line numbers on my side, to be able to confirm those are the correct lines, but I suspect that they are. To also further confirm have you since tried to log out and back in to see if the message goes away.

If you are also willing I'd like to insert some testing code to see what is going on with this and why/how the install is basically repetitively occurring (somewhat of and how). Are there any log errors generated in the logs directory? (if posting 2 things, 1) obscure your admin folder name, 2) please press the # button in the message box toolbar before pasting the code from the mydebug log(s)).

This is the second reported occurrence of this issue and I have even installed it on at least three different vanilla installs as well as systems that had previous versions, uninstalled installed fresh again and even installed an older version and then this one... So anything that can help identify why this is occurring would be welcome.

Quote:

---

Originally Posted by mc12345678

I didn't catch the line numbers on my side, to be able to confirm those are the correct lines, but I suspect that they are. To also further confirm have you since tried to log out and back in to see if the message goes away.

If you are also willing I'd like to insert some testing code to see what is going on with this and why/how the install is basically repetitively occurring (somewhat of and how). Are there any log errors generated in the logs directory? (if posting 2 things, 1) obscure your admin folder name, 2) please press the # button in the message box toolbar before pasting the code from the mydebug log(s)).

This is the second reported occurrence of this issue and I have even installed it on at least three different vanilla installs as well as systems that had previous versions, uninstalled installed fresh again and even installed an older version and then this one... So anything that can help identify why this is occurring would be welcome.

---

no worries, have logged in and out still the same, will get a log soon just taking son to school :)

Quote:

---

Originally Posted by jaydamuss

no worries, have logged in and out still the same, will get a log soon just taking son to school :)

---

here is the current log from yesterday cheers

Code:

---

[08-Jun-2017 18:06:52 America/New_York] Request URI: /###########/currencies.php, IP address: ########
#1  require() called at [/home/eneripek/public_html/includes/autoload_func.php:48]
#2  require(/home/eneripek/public_html/includes/autoload_func.php) called at [/home/eneripek/public_html/########/includes/application_top.php:171]
#3  require(/home/eneripek/public_html/#########/includes/application_top.php) called at [/home/eneripek/public_html/#######/currencies.php:10]

[08-Jun-2017 18:06:52 America/New_York] PHP Warning:  require(includes/init_includes/init_user_tracking.php): failed to open stream: No such file or directory in /home/eneripek/public_html/includes/autoload_func.php on line 48
[08-Jun-2017 18:06:52 America/New_York] Request URI: /#############/currencies.php, IP address: ###########
#1  require() called at [/home/eneripek/public_html/includes/autoload_func.php:48]
#2  require(/home/eneripek/public_html/includes/autoload_func.php) called at [/home/eneripek/public_html/##########/includes/application_top.php:171]
#3  require(/home/eneripek/public_html/##########/includes/application_top.php) called at [/home/eneripek/public_html/#########/currencies.php:10]

[08-Jun-2017 18:06:52 America/New_York] PHP Warning:  require(includes/init_includes/init_user_tracking.php): failed to open stream: No such file or directory in /home/eneripek/public_html/includes/autoload_func.php on line 48
[08-Jun-2017 18:06:52 America/New_York] PHP Fatal error:  require(): Failed opening required 'includes/init_includes/init_user_tracking.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/eneripek/public_html/includes/autoload_func.php on line 48

---

Ahhh... Another case of incorrect installation (file placement)...

There is no file on the store side that is expected to call the init_includes folder. Meaning the incorrect includes/auto_loaders/ file is placed in the store/catalog side... config.user_tracking_install.php should not be in the catalog directory it should only be in the admin directory.

All files and folders in YOUR_ADMIN directory should be placed only in the directory that is your secret admin. All files in the base includes directory should be in the catalog's includes directory. None of the files/folders found in the YOUR_ADMIN directory should be copied to the store's directory.

Guess I'll have to do with this installer like I did with another plugin which is to prevent operation of the auto_loader when installed into the catalog side, generate a message or delete the file, etc... to prevent the issue that is being seen.

Quote:

---

Originally Posted by mc12345678

Ahhh... Another case of incorrect installation (file placement)...

There is no file on the store side that is expected to call the init_includes folder. Meaning the incorrect includes/auto_loaders/ file is placed in the store/catalog side... config.user_tracking_install.php should not be in the catalog directory it should only be in the admin directory.

All files and folders in YOUR_ADMIN directory should be placed only in the directory that is your secret admin. All files in the base includes directory should be in the catalog's includes directory. None of the files/folders found in the YOUR_ADMIN directory should be copied to the store's directory.

Guess I'll have to do with this installer like I did with another plugin which is to prevent operation of the auto_loader when installed into the catalog side, generate a message or delete the file, etc... to prevent the issue that is being seen.

---

im not sure what you mean, all admin files were only put in my admin folder and the seperate includes folder went into the store side

Quote:

---

Originally Posted by jaydamuss

here is the current log from yesterday cheers

Code:

---

[08-Jun-2017 18:06:52 America/New_York] Request URI: /###########/currencies.php, IP address: ########
#1  require() called at [/home/eneripek/public_html/includes/autoload_func.php:48]
#2  require(/home/eneripek/public_html/includes/autoload_func.php) called at [/home/eneripek/public_html/########/includes/application_top.php:171]
#3  require(/home/eneripek/public_html/#########/includes/application_top.php) called at [/home/eneripek/public_html/#######/currencies.php:10]

[08-Jun-2017 18:06:52 America/New_York] PHP Warning:  require(includes/init_includes/init_user_tracking.php): failed to open stream: No such file or directory in /home/eneripek/public_html/includes/autoload_func.php on line 48
[08-Jun-2017 18:06:52 America/New_York] Request URI: /#############/currencies.php, IP address: ###########
#1  require() called at [/home/eneripek/public_html/includes/autoload_func.php:48]
#2  require(/home/eneripek/public_html/includes/autoload_func.php) called at [/home/eneripek/public_html/##########/includes/application_top.php:171]
#3  require(/home/eneripek/public_html/##########/includes/application_top.php) called at [/home/eneripek/public_html/#########/currencies.php:10]

[08-Jun-2017 18:06:52 America/New_York] PHP Warning:  require(includes/init_includes/init_user_tracking.php): failed to open stream: No such file or directory in /home/eneripek/public_html/includes/autoload_func.php on line 48
[08-Jun-2017 18:06:52 America/New_York] PHP Fatal error:  require(): Failed opening required 'includes/init_includes/init_user_tracking.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/eneripek/public_html/includes/autoload_func.php on line 48

---

---

Quote:

---

Originally Posted by jaydamuss

im not sure what you mean, all admin files were only put in my admin folder and the seperate includes folder went into the store side

---

Let me try to explain, though I doubt that I will do a good job at it because there is a bit of experience/observation from another module that has clued me into what is going on.

Little background: Saw the installer in another program when asked to perform some maintenance, it has some decent power to it if the plugin requires some form of SQL to be performed. It offers the ability to place a version indicator somewhere in the database and offer notification of a new version of the plugin being offered from the ZC site, although typically this version information is within the applicable configuration window for the plugin. A few things were observed with its operation and expectancy of those using it (including store owners) so a few modifications were incorporated to minimize the files that would/could be involved with the process and to reduce the ease of inadvertently modifying the plugin version. It is still possible, but requires more than a text box change. The installer/checker is placed in the admin folder structure to support admin operation.

So this installer has been used on a few plugins and out-of-the-box it works correctly and well when properly placed. Now comes the "experience/observation". In an attempted install of another plugin that used the same style of installer, the owner observed that it seemed like the default install settings remained regardless of the change(s) made in the options of the associated configuration window. Modify a setting to true (to activate the plugin) and on refresh the plugin was disabled as if the plugin (SQL) had been removed and then reinstalled. Come to find out, one or more of the admin/ files were copied into the catalog side of the store and effectively the plugin was repetitively installed followed by removed and immediately installed causing the default value(s) of the plugin to be restored/put into place.

Something very similar to this is occurring here where the plugin is basically being reinstalled and that is where the notification comes in. When the files are properly placed, the version information should appear one time with one line for each version that is "installed" or upgraded.

Now, what triggered this consideration? The above error message appears to have occurred while someone was in the admin looking at the currencies screen and possibly the files were being uploaded where the admin/includes/auto_loaders/config.user_tracking.php file was in place but the admin/includes/init_includes/init_user_tracking.php file was not yet present.

I haven't tested the system response of incorrectly loading the files to identify specifically which file(s) would need to be incorrectly placed for the response identified, but I know that the "error-checking" added to the other plugin is not yet incorporated into this one. That error trapping was to remove the installation portion of the plugin if the wrong auto_loader file was found in the wrong side of the store. So based on that and the previous experience it is my suggestion to not only verify that the files (not just by filename) are located where they should be, but that none of the provided files are placed where they should not be (filename recognition helps with this).

Unfortunately, this appears to be the only way that I can see that this repetitive "install" appears possible.

@jaydamuss,

Please accept my apologies as I was able to identify an error with the install code once I was on someone else's system and they had the same issue occur. Certainly there were some other factors at play, but I was able to identify the one minor issue that caused the database not to get updated with the version number (causing the process to repeat) and as a result of that error occurring there was another "catch all" that had to get more code, so.. I have uploaded an updated version of User Tracking that incorporates the other changes that I was working on basically that the data displayed is collected in a series of tables prior to being displayed. The thought was that this would maybe make transition to ZC 1.6.0 "easier". Not yet sure about that, but it was a path down which I had started and wanted to finish.

Anyways, also completed the transition of links to $_POST buttons instead of "links" (underline style). Here is the list of changes applied to the update:

Quote:

---

Updated 06/10/2017 Version 1.5.4 mc12345678:
1. Revised the installer to restore the expected operation. Bug had been introduced that prevented recognition of full installation.
2. Incorporated an additional check/correction to support reperformance of the installation if an error was introduced during installation,
helping to move forward from the above problem.
3. Generalized the installer further to not depend on the file extension taking only 4 characters in length.
4. Added install file to recognize this version.
5. Updated the geodata to the 8 June 2017 version.
6. Cleaned up code a little by removing closing php statements.
7. Prevent the install auto_loader from activating from the catalog side.
8. Rename class constructors to be PHP 7.0 compliant.
9. Modified the display of the User Tracking information
to use the generic admin table type class/object.
10. The idea is/was that it may make transition to ZC 1.6.0
easier, though could also be undone as necessary.
11. Further completed the transition of GET links to POST buttons.
12. Incorporated the type conversion issue identified
by davewest at: https://www.zen-cart.com/showthread....racking+mktime
13. Generally adjusted the lines of the main page to use
spaces instead of tabs, aligned code to support improved
readability.
14. Incorporated associated language file modifications,
even if the language is/was not translated yet.

---

And I finally got my local User Tracking git files pushed to my github so that in the future it would be easier to discuss the code and not have to download it to a local computer just to look at it.

So, for the installer, to quickly get that to be quiet and correct.
See the changes made/shown for the admin/includes/init_includes/init_user_tracking.php file found at this github path:
https://github.com/mc12345678/User_T...ec9cc9bb045087

Quote:

---

Originally Posted by mc12345678

@jaydamuss,

Please accept my apologies as I was able to identify an error with the install code once I was on someone else's system and they had the same issue occur. Certainly there were some other factors at play, but I was able to identify the one minor issue that caused the database not to get updated with the version number (causing the process to repeat) and as a result of that error occurring there was another "catch all" that had to get more code, so.. I have uploaded an updated version of User Tracking that incorporates the other changes that I was working on basically that the data displayed is collected in a series of tables prior to being displayed. The thought was that this would maybe make transition to ZC 1.6.0 "easier". Not yet sure about that, but it was a path down which I had started and wanted to finish.

Anyways, also completed the transition of links to $_POST buttons instead of "links" (underline style). Here is the list of changes applied to the update:


And I finally got my local User Tracking git files pushed to my github so that in the future it would be easier to discuss the code and not have to download it to a local computer just to look at it.

So, for the installer, to quickly get that to be quiet and correct.
See the changes made/shown for the admin/includes/init_includes/init_user_tracking.php file found at this github path:
https://github.com/mc12345678/User_T...ec9cc9bb045087

---

i thank you soo much, the messages have gone and now works perfect :)
cheers

Quote:

---

Originally Posted by jaydamuss

i thank you soo much, the messages have gone and now works perfect :)
cheers

---

No, yet again, thank you for reporting the issue. As said, hadn't occurred on my side, so wouldn't have known to do anything without the report. :)

As an aside, I'm going back through the installer as used on other plugins and making some notes as although there were a few things to improve, some of the rewrites to try to resolve this issue were unnecessary and just complicated things.

I am running 1.5.4 and installed the User-tracking-V.1.5.4. I made the file changes as suggested and installed all files as indicated. I get an error. I followed all troubleshooting tips including a complete uninstall and re-install and get the same errors:

[13-Jun-2017 12:53:01 America/New_York] PHP Warning: file_get_contents(): http:// wrapper is disabled in the server configuration by allow_url_fopen=0 in /hermes/bosnaweb07a/b261/ipg.garsquaredcom/obiecue/includes/functions/plugin_support.php on line 38
[13-Jun-2017 12:53:01 America/New_York] PHP Warning: file_get_contents(http://www.zen-cart.com/downloads.ph...heck&id=1744): failed to open stream: no suitable wrapper could be found in /hermes/bosnaweb07a/b261/ipg.garsquaredcom/obiecue/includes/functions/plugin_support.php on line 38
[13-Jun-2017 12:53:01 America/New_York] PHP Warning: in_array() expects parameter 2 to be array, null given in /hermes/bosnaweb07a/b261/ipg.garsquaredcom/obiecue/includes/functions/plugin_support.php on line 42

Any suggestions?

Tony

Yeah, that's because of the version checking that is in the install file (admin/includes/init_includes/init_user_tracking.php) and how it is implemented on ZC 1.5.4, though it is interesting that it is happening with the plugin and not with the routine operation of the admin (unless something is being done to bypass the main screen where the issue is likely to appear)... Anyways, you could/should be able to do any of the following, though the first action probably will have to relate to a file modification.

Could remove the admin/includes/auto_loaders/config.user_tracking_install.php file, and then could modify ad
min/includes/init_includes/init_user_tracking.php

Towards the end of the file, modify:

Code:

---

// Version Checking
if ($zencart_com_plugin_id != 0 && SHOW_VERSION_UPDATE_IN_HEADER && (!defined($module_constant . '_PLUGIN_CHECK') || constant($module_constant . '_PLUGIN_CHECK'))) {
    $new_version_details = plugin_version_check_for_updates($zencart_com_plugin_id, $current_version);
    if ($_GET['gID'] == $configuration_group_id && $new_version_details != FALSE) {
        $messageStack->add("Version ".$new_version_details['latest_plugin_version']." of " . $new_version_details['title'] . ' is available at <a href="' . $new_version_details['link'] . '" target="_blank">[Details]</a>', 'caution');
    }
}

---

to either add the below red text:

Code:

---

// Version Checking
if (false && $zencart_com_plugin_id != 0 && SHOW_VERSION_UPDATE_IN_HEADER && (!defined($module_constant . '_PLUGIN_CHECK') || constant($module_constant . '_PLUGIN_CHECK'))) {
    $new_version_details = plugin_version_check_for_updates($zencart_com_plugin_id, $current_version);
    if ($_GET['gID'] == $configuration_group_id && $new_version_details != FALSE) {
        $messageStack->add("Version ".$new_version_details['latest_plugin_version']." of " . $new_version_details['title'] . ' is available at <a href="' . $new_version_details['link'] . '" target="_blank">[Details]</a>', 'caution');
    }
}

---

Or remove that entire block of code.

Ideally, the includes/functions/plugin_support.php file would get updated to the recently available copy from ZC 1.5.5: https://github.com/zencart/zencart/b...in_support.php (or perhaps that from 1.6.0 might be further improved?)

Technically though if SHOW_VERSION_UPDATE_IN_HEADER is set to false, then this shouldn't have been an issue... I'll also look at changing the criteria for performing the check, but ideally, there shouldn't be an issue with the check being attempted... Right? :)

I made these changes:
edited the init_user_tracking.php as suggested. Removed the config.user_tracking_install.php file and dropped in the plugin_support.php file from git hub. Those errors are gone.
Now I get this error:

PHP Parse error: syntax error, unexpected '<' in /hermes/bosnaweb07a/b261/ipg.garsquaredcom/obiecue/BBQadmin/user_tracking.php on line 390


I removed the line since it was commented out and the plugin is working.

Thanks,
Tony

Quote:

---

Originally Posted by mc12345678

Yeah, that's because of the version checking that is in the install file (admin/includes/init_includes/init_user_tracking.php) and how it is implemented on ZC 1.5.4, though it is interesting that it is happening with the plugin and not with the routine operation of the admin (unless something is being done to bypass the main screen where the issue is likely to appear)... Anyways, you could/should be able to do any of the following, though the first action probably will have to relate to a file modification.

Could remove the admin/includes/auto_loaders/config.user_tracking_install.php file, and then could modify ad
min/includes/init_includes/init_user_tracking.php

Towards the end of the file, modify:

Code:

---

// Version Checking
if ($zencart_com_plugin_id != 0 && SHOW_VERSION_UPDATE_IN_HEADER && (!defined($module_constant . '_PLUGIN_CHECK') || constant($module_constant . '_PLUGIN_CHECK'))) {
    $new_version_details = plugin_version_check_for_updates($zencart_com_plugin_id, $current_version);
    if ($_GET['gID'] == $configuration_group_id && $new_version_details != FALSE) {
        $messageStack->add("Version ".$new_version_details['latest_plugin_version']." of " . $new_version_details['title'] . ' is available at <a href="' . $new_version_details['link'] . '" target="_blank">[Details]</a>', 'caution');
    }
}

---

to either add the below red text:

Code:

---

// Version Checking
if (false && $zencart_com_plugin_id != 0 && SHOW_VERSION_UPDATE_IN_HEADER && (!defined($module_constant . '_PLUGIN_CHECK') || constant($module_constant . '_PLUGIN_CHECK'))) {
    $new_version_details = plugin_version_check_for_updates($zencart_com_plugin_id, $current_version);
    if ($_GET['gID'] == $configuration_group_id && $new_version_details != FALSE) {
        $messageStack->add("Version ".$new_version_details['latest_plugin_version']." of " . $new_version_details['title'] . ' is available at <a href="' . $new_version_details['link'] . '" target="_blank">[Details]</a>', 'caution');
    }
}

---

Or remove that entire block of code.

Ideally, the includes/functions/plugin_support.php file would get updated to the recently available copy from ZC 1.5.5: https://github.com/zencart/zencart/b...in_support.php (or perhaps that from 1.6.0 might be further improved?)

Technically though if SHOW_VERSION_UPDATE_IN_HEADER is set to false, then this shouldn't have been an issue... I'll also look at changing the criteria for performing the check, but ideally, there shouldn't be an issue with the check being attempted... Right? :)

---

Quote:

---

Originally Posted by tonyreynolds

I made these changes:
edited the init_user_tracking.php as suggested. Removed the config.user_tracking_install.php file and dropped in the plugin_support.php file from git hub. Those errors are gone.
Now I get this error:

PHP Parse error: syntax error, unexpected '<' in /hermes/bosnaweb07a/b261/ipg.garsquaredcom/obiecue/BBQadmin/user_tracking.php on line 390


I removed the line since it was commented out and the plugin is working.

Thanks,
Tony

---

Comments to these changes:

Quote:

---

Originally Posted by tonyreynolds

I made these changes:
edited the init_user_tracking.php as suggested. Removed the config.user_tracking_install.php file and dropped in the plugin_support.php file from git hub. Those errors are gone.

---

Dropping in the plugin_support.php file from github should have resolved the issue without editing init_user_tracking.php or removing the config.user_tracking_install.php file. (in fact now that those two portions have been performed, you will not receive in admin notification of an updated copy of user tracking being available from the ZC forum.)

Quote:

---

Originally Posted by tonyreynolds

PHP Parse error: syntax error, unexpected '<' in YOUR_SECRET_ADMIN/user_tracking.php on line 390

I removed the line since it was commented out and the plugin is working.

---

This is/was an error introduced in both "trimming" down the code that was on the live test version and "trying" to leave behind a possible "screen" (page source) indicator of where in the process the table was being presented. I have identified it as an issue on github and will be editing the file to address it. There are two ways that it could be addressed, I haven't evaluated yet which option is the way desired to go. It is/was intended to be an html comment (part of how the modification was being performed which was to build a table around the data that was being displayed to validate that relatively speaking the output was equivalent for the two methods). So it could either be deleted as was done above, or it could be "displayed" by encompassing in php related identifiers such as:

Code:

---

?><!--        <table border="0" width="100%" cellspacing="0" cellpadding="0"> --><?php

---

LASTLY, and probably most important for this store, suggest revising the admin directory name... :/ It should not be posted as a matter of norm and remain known only to those that have a need to access it. :lookaroun


Thank you for identifying the issues and way you resolved the problem(s).

By the way, the fix to admin/user_tracking.php file has been posted to github at the following commit: https://github.com/mc12345678/User_T...74511700d32b45

This will be incorporated into the next version. Please identify any other issues (possibly with solution) to be incorporated.

Thanks all!

Good point and thanks. Changes made to the admin directory.....

Tony


LASTLY, and probably most important for this store, suggest revising the admin directory name... :/ It should not be posted as a matter of norm and remain known only to those that have a need to access it. :lookaroun


Thank you for identifying the issues and way you resolved the problem(s).[/QUOTE]

Quote:

---

Originally Posted by mc12345678

Comments to these changes:


Dropping in the plugin_support.php file from github should have resolved the issue without editing init_user_tracking.php or removing the config.user_tracking_install.php file. (in fact now that those two portions have been performed, you will not receive in admin notification of an updated copy of user tracking being available from the ZC forum.)



This is/was an error introduced in both "trimming" down the code that was on the live test version and "trying" to leave behind a possible "screen" (page source) indicator of where in the process the table was being presented. I have identified it as an issue on github and will be editing the file to address it. There are two ways that it could be addressed, I haven't evaluated yet which option is the way desired to go. It is/was intended to be an html comment (part of how the modification was being performed which was to build a table around the data that was being displayed to validate that relatively speaking the output was equivalent for the two methods). So it could either be deleted as was done above, or it could be "displayed" by encompassing in php related identifiers such as:

Code:

---

?><!--        <table border="0" width="100%" cellspacing="0" cellpadding="0"> --><?php

---

LASTLY, and probably most important for this store, suggest revising the admin directory name... :/ It should not be posted as a matter of norm and remain known only to those that have a need to access it. :lookaroun


Thank you for identifying the issues and way you resolved the problem(s).

---

I undid all the edits to the original state, updated the user_tracking.php and kept the plugin_support.php file. Everything works properly. Thanks again.
TR

Hello, I just installed the latest version and when I click on Tools -> User Tracking I get a 500 error. Config -> User Tracking Config works.

I'm running ZenCart v1.5.5. I'm not sure if I've ever installed this before but I do remember years ago using Super Tracker..

My update history:
Database Patch Level: 1.5.5

v1.5.5 [2016-04-22 03:00:51] (Version Update 1.5.4->1.5.5)
v1.5.4 [2016-04-22 03:00:51] (Version Update 1.5.3->1.5.4)
v1.5.3 [2016-04-22 03:00:50] (Version Update 1.5.2->1.5.3)
v1.5.2 [2016-04-22 03:00:50] (Version Update 1.5.1->1.5.2)
v1.5.1 [2013-12-05 05:48:47] (Version Update 1.5.0->1.5.1)
v1.5.0 [2013-12-05 05:48:47] (Version Update 1.3.9->1.5.0)
v1.3.9h [2011-08-14 11:41:12] (Version Update 1.3.8->1.3.9h)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)

Thanks

Quote:

---

Originally Posted by Christoff

Hello, I just installed the latest version and when I click on Tools -> User Tracking I get a 500 error. Config -> User Tracking Config works.

I'm running ZenCart v1.5.5. I'm not sure if I've ever installed this before but I do remember years ago using Super Tracker..

My update history:
Database Patch Level: 1.5.5

v1.5.5 [2016-04-22 03:00:51] (Version Update 1.5.4->1.5.5)
v1.5.4 [2016-04-22 03:00:51] (Version Update 1.5.3->1.5.4)
v1.5.3 [2016-04-22 03:00:50] (Version Update 1.5.2->1.5.3)
v1.5.2 [2016-04-22 03:00:50] (Version Update 1.5.1->1.5.2)
v1.5.1 [2013-12-05 05:48:47] (Version Update 1.5.0->1.5.1)
v1.5.0 [2013-12-05 05:48:47] (Version Update 1.3.9->1.5.0)
v1.3.9h [2011-08-14 11:41:12] (Version Update 1.3.8->1.3.9h)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)

Thanks

---

A few things as not discussed, have you applied the patch of post 748 and what is the error log that is/was generated? (see your logs directory and this FAQ: http://www.zen-cart.com/content.php?124-blank-page)

Quote:

---

Originally Posted by mc12345678

A few things as not discussed, have you applied the patch of post 748 and what is the error log that is/was generated? (see your logs directory and this FAQ: http://www.zen-cart.com/content.php?124-blank-page)

---

Applying that patch fixed it!

This was the error in the log file:
[16-Jun-2017 10:46:45 UTC] PHP Fatal error: Class 'user_tracking_admin' not found in /home/**********/public_html/includes/autoload_func.php on line 79

No error now.

Thanks for your assistance! :)

Quote:

---

Originally Posted by Christoff

Applying that patch fixed it!

This was the error in the log file:
[16-Jun-2017 10:46:45 UTC] PHP Fatal error: Class 'user_tracking_admin' not found in /home/**********/public_html/includes/autoload_func.php on line 79

No error now.

Thanks for your assistance! :)

---

Glad that it worked and thank you for posting back. As soon as I can, I'd like to make the downloadable plugin one that doesn't require any additional fixes to support out-of-the box operation.

The error message though related to the issue appears to identify that at the time at least one file had not been loaded to the server. It strikes me somewhat odd the difference between that error message and the one that led to the solution of the previous post.

Is there anyway to hide or not show all the robot hacker visits that try to access files like "wplogin.php" as I can see so many user sessions where this is accessed:

search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advanced_search

I'm running Zen Cart obviously and not Wordpress but these hacker attempts distract from the "real" customers I am analyzing data from :)

Anybody have any tips?

Thanks!

Brandon

Quote:

---

Originally Posted by Nitroedge

Is there anyway to hide or not show all the robot hacker visits that try to access files like "wplogin.php" as I can see so many user sessions where this is accessed:

search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advanced_search

I'm running Zen Cart obviously and not Wordpress but these hacker attempts distract from the "real" customers I am analyzing data from :)

Anybody have any tips?

Thanks!

Brandon

---

There are a number of ways that come to mind to not display either the record of that attempt or the entire visit of that "individual" pretty much depending on what type of review is being performed and what is desired to be seen as a result.

Ie. Do you want the record to still be logged and then somehow managed when viewing records or some level of not ever logging the record?

Thanks for the speedy reply!

I'd love to just hide them and never log them nor see them, that would be great. Just filtering them out so I can concentrate on analyzing real customers.

Quote:

---

Originally Posted by Nitroedge

Thanks for the speedy reply!

I'd love to just hide them and never log them nor see them, that would be great. Just filtering them out so I can concentrate on analyzing real customers.

---

You say "them". Are you referring to the single line of text or the "person" that entered that line of data?

Just to try to explain a little. To prevent any log entry of a row of data means that there must be some "pre-known" list of things to not log. That could be a word list that has been generated based on previous review, or some other factor. To not log a "user", requires pretty much the same thing (pre-made list) and then possibly some action to be taken if they "trip" across one of the no-no items.

If only a single record/page visit is skipped for each "keyword" then there are likely to be time gaps between one page visit and another when looking at the recorded data. (would likely want to flag the "user" as having tried to access one of the no-no items.)

Then on the output side, if the record had been logged, such keywords could be used as a filter to prevent different types of reporting: make the "user" a spider/bot, hide the single page visit from the totals, hide the user from page views, etc...

Also, are you reviewing the data while it is on screen or through some sort of export of the table? The answer to that can change the approach significantly.

I'm reviewing the data from the User Tracking data on my screen.

I understand what you mean by "them", the "them" is any user that tries to access:

&search_in_description=1&keyword=wp%20login%20php

The above seems to be the one consistent piece of code in each hack attempt.

Data from log from 4 users (after the user's "?zenid string):

&search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advance d_search
&search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advance d_search
&search_in_description=1&keyword=wp%20login%20php%20action%20register&inc_subcat =0&main_page=advanced_search
&search_in_description=1&keyword=wp%20login%20php%20action%20register&inc_subcat =0&main_page=advanced_search

For a short period of time I did do an IP Block on their addresses in my cPanel, but there are so many of them and from different countries I stopped doing that.
I'm curious if other people get these types of activity in their User Tracking logs?

Thanks!

Yes, considering that I see those type entries and others that are historically known to allow some form of sql injection (in older versions of ZC), I would suspect that those using this mod would see something similar.

So, with that in mind, my thought of approach is to create an admin configuration field, in which a portion of the string to cause the individual to be ignored would be entered.
Then, another on screen option to either show or hide or only show those "visitors", but in any case to provide an indicator for each such visitor that they used one of the "key" words.

This way, a review could be performed to see all traffic, all traffic that doesn't include that text or to look through all traffic of those that have tried that or similar.

How's that sound to you (and others)?

Quote:

---

Originally Posted by mc12345678

Yes, considering that I see those type entries and others that are historically known to allow some form of sql injection (in older versions of ZC), I would suspect that those using this mod would see something similar.

So, with that in mind, my thought of approach is to create an admin configuration field, in which a portion of the string to cause the individual to be ignored would be entered.
Then, another on screen option to either show or hide or only show those "visitors", but in any case to provide an indicator for each such visitor that they used one of the "key" words.

This way, a review could be performed to see all traffic, all traffic that doesn't include that text or to look through all traffic of those that have tried that or similar.

How's that sound to you (and others)?

---

That sounds fantastic and would work awesome. I'm glad I could communicate the problem effectively, as seeing all those hack attempts in between the real customer visits kinda messes up the activity report. If it's hidden then I can see the big benefit. Great idea!

Quote:

---

Originally Posted by Nitroedge

That sounds fantastic and would work awesome. I'm glad I could communicate the problem effectively, as seeing all those hack attempts in between the real customer visits kinda messes up the activity report. If it's hidden then I can see the big benefit. Great idea!

---

So I have this operational, I've chosen a few things to modify the "display", but I'd be glad to take others input for modification. Right now, a word is added in front of the "name" of the searcher (Guest or logged in individual) also there should be some color change made to parts of the row.

While the genesis of this feature was to eliminate the presentation of records for users "testing" the site, the feature also allows filtering for other reasons (to show records of users getting to a particular web-page, etc..). Filter "words" are to be comma separated and suggest using whatever is displayed when looking at the UT admin screen.

I have updated the github location but also have submitted the plugin to ZC with the following modifications identified:

Quote:

---

* Version 1.5.5:
* - Removed HTML that was in the middle of PHP code.
* - Moved Admin menu option "name" to the languages folder to support multiple languages.
* - Improved sanitization for catalog and store side data capture.
* - Made radio labels clickable to support radio button activation.
* - Added feature to filter URL information that was captured when the site was visited.
* - Added default settings to the top of the admin/user_tracking.php file.
* - Removed unused code/variables in the two detection files.
* - Updated version compare software to latest available in the ZC 1.5.5 series (not identified yet to a specific version)

---

Once reviewed and accepted should be available from here.

That is awesome and thanks!

Sorry I can't find the github location, could you post it again or point me in the right direction?

Quote:

---

Originally Posted by Nitroedge

That is awesome and thanks!

Sorry I can't find the github location, could you post it again or point me in the right direction?

---

User Tracking on github can be found here.

Got it, since my mod is working with my Zen Cart v1.51, should I just FTP overwrite all the files with the new files?

I don't need to do any install script or similar?

Just overwrite and I'll have the new features for filter words etc?

Quote:

---

Originally Posted by Nitroedge

Got it, since my mod is working with my Zen Cart v1.51, should I just FTP overwrite all the files with the new files?

I don't need to do any install script or similar?

Just overwrite and I'll have the new features for filter words etc?

---

That's the expectation. Please report if that doesn't work, issues identified, and if had to work through something related to please identify the solution that worked. Or if no issues, would appreciate report back that worked and possibly other system conditions that may seem obscure or edge case (low/high PHP version, old ZC version, etc...)

Not entirely sure what's going on with the latest user tracking mod in ZC 1.5.5, but working properly is not happening. First of all the auto install doesn't create a database table called user_tracing, it doesn't create a config menu option and it doesn't create a tools menu option.

I ran the create user_tracking table function by planting it into a define page and loading the define page. Then the readme file says to add <?php $zco_notifier->notify('NOTIFY_FOOTER_END'); ?> to the end of the tpl_main_page.php file which doesn't make much sense as that call already exists there, but adding a call to the function zen_update_user_tracking(); does work. However, while this function call does get records added to the database table, the .com/admin/user_tracking.php still doesn't show any of those records. Just blank records area. User tracking back in the day had some issues, but this is crazy.

Quote:

---

Originally Posted by bumba000

Not entirely sure what's going on with the latest user tracking mod in ZC 1.5.5, but working properly is not happening. First of all the auto install doesn't create a database table called user_tracing, it doesn't create a config menu option and it doesn't create a tools menu option.

I ran the create user_tracking table function by planting it into a define page and loading the define page. Then the readme file says to add <?php $zco_notifier->notify('NOTIFY_FOOTER_END'); ?> to the end of the tpl_main_page.php file which doesn't make much sense as that call already exists there, but adding a call to the function zen_update_user_tracking(); does work. However, while this function call does get records added to the database table, the .com/admin/user_tracking.php still doesn't show any of those records. Just blank records area. User tracking back in the day had some issues, but this is crazy.

---

Sounds like an incomplete install/upload of files.

The note about adding a notifier to the includes/templates/YOUR_TEMPLATE/common/tpl_main_page.php file is related to pre-ZC 1.5.5 because it is in ZC 1.5.5 that the notifier was added. There is the possibility that a newer template could have been installed to an older system that already had that line in it and yes the instruction would then be incorrect. It will be updated to indicate to add the line if it does not already exist.

As to no action being taken even with its presence, but calling the function seems to work AND that the notifier has already been identified as being present implies that the includes/auto_loaders and/or includes/classes/observers related file(s) have not been put to the server at least in the expected location(s).

I suggest also performing a search using the tools->developers tool kit for init_user_tracking and identifying the path(s) to the search response. Obscure the directory name for YOUR_SECRET_ADMIN directory if/when presented.

As to the lack of table and/or admin menu options in relation to the discussion of an older User Tracking installation, what is the history of the database to which this was installed? Had it previously had User tracking installed? It may be a good idea to run the uninstall sql to ensure removal of old partial remnants. A lot of effort went into Version 1.5.3 to try to convert previous installations to using this more standardized installer primarily so that the user_tracking table didn't get wiped out every time a new version was presented. There hasn't been a change to the table in a very long time, so there doesn't seem to be a need to delete it when other features are added/modified.

I checked uploaded files against all included in download. All files were uploaded.

public_html/shop/my_super_secret_admin_location/includes/auto_loaders/config.user_tracking_install.php

there was no previous installation as this is a fresh install.

Also, as stated previously. The responsive_classic template in use already includes the $zco_notifier->notify('NOTIFY_FOOTER_END', $current_page); mentioned in the installation_readme.txt file. It does not populate the user_tracking db table, but calling the function zen_update_user_tracking(); works as it always has.

Quote:

---

Originally Posted by bumba000

I checked uploaded files against all included in download. All files were uploaded.

public_html/shop/my_super_secret_admin_location/includes/auto_loaders/config.user_tracking_install.php

there was no previous installation as this is a fresh install.

Also, as stated previously. The responsive_classic template in use already includes the $zco_notifier->notify('NOTIFY_FOOTER_END', $current_page); mentioned in the installation_readme.txt file. It does not populate the user_tracking db table, but calling the function zen_update_user_tracking(); works as it always has.

---

And with the includes/auto_loaders/config.user_tracking.php and includes/classes/observers/class.user_tracking.php in place as well as all of the version scripts being run: please identify what files are located in admin/includes/installers/user_tracking/
With all of that entered/applied, then all of the database settings would exist to allow the plugin to function. Otherwise there are settings that are missing that could cause the issues you are describing.

all of them
1_5_3.php,1_5_4.php,1_5_5.php and uninstall_user_tracking.php. I just ran the config queries

PHP Code:

---

$db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'ZEN_CONFIG_USER_TRACKING', 'User Tracking Visitors', 'true', 'Check  the Customers/Guests behaviour ? (each click will be recorded)', " . 10 *  (1 + (int)array_search('ZEN_CONFIG_USER_TRACKING', $sort_order)) . ",  NOW(), NULL, 'zen_cfg_select_option(array(''true'', ''false''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'ADMIN_CONFIG_USER_TRACKING', 'User Tracking (ADMIN)', 'true', 'Check  the ADMINs behaviour ? (each click will be recorded)', " . 10 * (1 +  (int)array_search('ADMIN_CONFIG_USER_TRACKING', $sort_order)) . ",  NOW(), NULL, 'zen_cfg_select_option(array(''true'', ''false''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_EXCLUDED', 'User Tracking (exclude this  IP-Address)', 'your IP', 'Do NOT record this IP Address<br>(like  webmaster/owners/Beta-testers)', " . 10 * (1 +  (int)array_search('CONFIG_USER_TRACKING_EXCLUDED', $sort_order)) . ",  NOW(), NULL, NULL);");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_SESSION_LIMIT', 'User Tracking (Session  Limit)', '50', 'Displaying the latest # sessions of this 24 hour  period.<br>(SET to 999999 for unlimited per 24 hour  period)<br>NOTE:<BR>Watch you space !', " . 10 * (1 +  (int)array_search('CONFIG_USER_TRACKING_SESSION_LIMIT', $sort_order)) .  ", NOW(), NULL, NULL);");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_ADMIN_CAN_DELETE', 'User Tracking (Admin User  Can Delete)', 'true', 'Allow Record Deletion to be  Active?<br/>Setting this to true will override ENTRY and SESSION  purges.<br/>Default <b>true</b><br/>', " . 10 *  (1 + (int)array_search('CONFIG_USER_TRACKING_ADMIN_CAN_DELETE',  $sort_order)) . ", NOW(), NULL, 'zen_cfg_select_option(array(''true'',  ''false''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_ADMIN_CAN_DELETE_RECORDS', 'User Tracking  (Admin User Can Delete Historical Data)', 'false', 'Allow Record  Deletion of records older than now - the purge duration set  below.<br/>This value is ignored if Admin User Can Delete is set  to true.  Otherwise set this to true to allow deletion of  visits.<br/>Default <b>false</b>.<br/>', " . 10 *  (1 + (int)array_search('CONFIG_USER_TRACKING_ADMIN_CAN_DELETE_RECORDS',  $sort_order)) . ", NOW(), NULL, 'zen_cfg_select_option(array(''true'',  ''false''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_ADMIN_CAN_DELETE_SESSIONS', 'User Tracking  (Admin User Can Delete SESSIONS)', 'false', 'Allow SESSION Deletion to  be Active?<br/>This setting is ignored if Admin User Can Delete is  set to true.<br/>Default <b>false</b><br/>', " .  10 * (1 +  (int)array_search('CONFIG_USER_TRACKING_ADMIN_CAN_DELETE_SESSIONS',  $sort_order)) . ", NOW(), NULL, 'zen_cfg_select_option(array(''true'',  ''false''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_ADMIN_CAN_DELETE_IP', 'User Tracking (Admin  User Can Delete IP)', 'false', 'Allow Deletion of records that match the  identified IP address?<br/>This setting is ignored if Admin User  Can Delete is set to true.<br/>Default  <b>false</b><br/>', " . 10 * (1 +  (int)array_search('CONFIG_USER_TRACKING_ADMIN_CAN_DELETE_IP',  $sort_order)) . ", NOW(), NULL, 'zen_cfg_select_option(array(''true'',  ''false''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_PURGE_NUMBER', 'User Tracking (Purge this  Number)', '3', 'What is the number associated with purging before the  current date/time?<br/><br/>An example would be to choose 3  here and units associated with days to delete data greater than 3 days  before today.<br/>', " . 10 * (1 +  (int)array_search('CONFIG_USER_TRACKING_PURGE_NUMBER', $sort_order)) .  ", NOW(), NULL, NULL);");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_PURGE_UNITS', 'User Tracking (Purge Units)',  '1440', 'Pick the units associate with the periodicity to allow purging  data.<br/><br/>60) Hours<br/>1440)  Days<br/>10080) Weeks<br/>43200) Months (Based on 30  days)<br/>', " . 10 * (1 +  (int)array_search('CONFIG_USER_TRACKING_PURGE_UNITS', $sort_order)) . ",  NOW(), NULL, 'zen_cfg_select_option(array(''60'',  ''1440'',''10080'',''43200''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'CONFIG_USER_TRACKING_TRACK_TYPE_RECORD', 'User Tracking (Type of  User Interaction to Record)', '1', 'Type of user tracking to  record?<br/><br/>1 - All visitors.<br/>2 - Visitors  views where sessions have been started.<br/>3 - All users except  bots/spiders ( requires Configuration->Sessions->Prevent Spider  Sessions->true)  (Don\'t know if this works with Zen-Cart versions  older than 1.2.6d)<br/><br/>Related to above: If you set  Force Cookie Use->true, then at the first user entry, sessions do not  start!!! And in variants 2 and 3, user-tracking will not have started.  In this case you lose one click and do not log the refferal. But if this  user is a returning user and has an old/previous zen cookie the session  started and your tracking system will collect this info. So, the result  beforehand is not logged or will not be known.<br/>', " . 10 * (1  + (int)array_search('CONFIG_USER_TRACKING_TRACK_TYPE_RECORD',  $sort_order)) . ", NOW(), NULL, 'zen_cfg_select_option(array(''1'',  ''2'',''3''),');");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'USER_TRACKING_WHOIS_URL', 'User Tracking (your favorite WHOIS URL)',  'http://www.dnsstuff.com/tools/whois.ch?ip=', 'Put here you favorite  WHOIS tracking site<br>(the IP will follow automaticly after this  url)', " . 10 * (1 + (int)array_search('USER_TRACKING_WHOIS_URL',  $sort_order)) . ", NOW(), NULL, NULL);");
        $db->Execute("INSERT IGNORE INTO " . TABLE_CONFIGURATION . "  (configuration_group_id, configuration_key, configuration_title,  configuration_value, configuration_description, sort_order, date_added,  use_function, set_function) VALUES (" . (int) $configuration_group_id .  ", 'ZEN_CONFIG_SHOW_USER_TRACKING_CATEGORY', 'User Tracking (Show  Product Category when tracking product clicks)', 'true', 'Show Product  Category when tracking product clicks', " . 10 * (1 +  (int)array_search('ZEN_CONFIG_SHOW_USER_TRACKING_CATEGORY',  $sort_order)) . ", NOW(), NULL, 'zen_cfg_select_option(array(''true'',  ''false''),');"); 


---

But I haven't been able to find the admin pages queries to create those records. When I do access the config page which did get placed in the configuration_group with id 31, there are only three options on the page update check, version installed and filter words.

ehhh. well I did find those queries in admin> installers/ut/1_5_5.php. So I guess there are only supposed to be those three config options. Well either way, the admin/user_tracking.php page isn't showing any of the records that I now have being logged into the ut db table.

I haven't gotten to the bottom of it just yet, but the reason no records are being returned has something to do with $time_frame

So. Records are being returned now after changing the date range back one day as the server date is currently 07/13/2017 02:07:55 though it's still only 10 pm 7/12 here. I haven't done a fresh install in some time so I'll work on changing the default time zone. However, this doesn't change the fact that there were no records being returned for the 12th when the server date was the 12th.

So, issue was in both some note taking and a modification made in the admin/includes/init_includes/init.user_tracking.php file.

a sort function was removed that is needed.

Code:

---

  if (sizeof($installers) > 0) {
      $newest_version = $installers[0];
      $newest_version = substr($newest_version, 0, -1 * $file_extension_len);

      if (version_compare($newest_version, $current_version) > 0) {
          foreach ($installers as $installer) {
              if (substr($installer, strrpos($installer, '.')) == $file_extension && (preg_match('~^[^\._].*\.php$~i', $installer) > 0 || $installer != 'empty.txt')) {
                  if (version_compare($newest_version, substr($installer, 0, -1 * $file_extension_len)) >= 0 && version_compare($current_version, substr($installer, 0, -1 * $file_extension_len)) < 0) {
                      include($module_installer_directory . '/' . $installer);
                      $current_version = str_replace("_", ".", substr($installer, 0, -1 * $file_extension_len));
                      $db->Execute("UPDATE " . TABLE_CONFIGURATION . " SET configuration_value = '" . $current_version . "', set_function = 'zen_cfg_select_option(array(\'" . $current_version . "\'),' WHERE configuration_key = 'CONFIG_" . $module_constant . "_VERSION' LIMIT 1;");
                      $messageStack->add("Installed " . $module_name . " v" . $current_version, 'success');
                  }
              }
          }
      }
  }

---

modified to:

Code:

---

  if (sizeof($installers) > 0) {
      $newest_version = $installers[0];
      $newest_version = substr($newest_version, 0, -1 * $file_extension_len);

      sort($installers);
      if (version_compare($newest_version, $current_version) > 0) {
          foreach ($installers as $installer) {
              if (substr($installer, strrpos($installer, '.')) == $file_extension  && (preg_match('~^[^\._].*\.php$~i', $installer) > 0 ||  $installer != 'empty.txt')) {
                  if  (version_compare($newest_version, substr($installer, 0, -1 *  $file_extension_len)) >= 0 &&  version_compare($current_version, substr($installer, 0, -1 *  $file_extension_len)) < 0) {
                      include($module_installer_directory . '/' . $installer);
                      $current_version = str_replace("_", ".", substr($installer, 0, -1 * $file_extension_len));
                      $db->Execute("UPDATE " . TABLE_CONFIGURATION . " SET  configuration_value = '" . $current_version . "', set_function =  'zen_cfg_select_option(array(\'" . $current_version . "\'),' WHERE  configuration_key = 'CONFIG_" . $module_constant . "_VERSION' LIMIT  1;");
                      $messageStack->add("Installed " . $module_name . " v" . $current_version, 'success');
                  }
              }
          }
      }
  }

---

The scandir function is intended to return the list in descending order. This allows quickly identifying if there is a new version associated. The note next to that action is incorrect identifying that the order is instead ascending. The second sort (missing in the download) is to organize the list to apply the updates in sequence and to prevent running recognized undesirable files. It was a sort of last minute "fix" thinking that by removing it the file was being returned back to more of its original state.

Quote:

---

Originally Posted by mc12345678

That's the expectation. Please report if that doesn't work, issues identified, and if had to work through something related to please identify the solution that worked. Or if no issues, would appreciate report back that worked and possibly other system conditions that may seem obscure or edge case (low/high PHP version, old ZC version, etc...)

---

I copied over all the files and overwrote the old ones. The User Tracking under Tools just came up blank. I checked out the config and saw the new entry for the words filter though.

Unfortunately what I think has happened is I am running ZC v1.51 and I remember when I installed your last latest version .54 first nothing worked for me, I had to go back and download the base v1.5 version with the SQL installer. Running the installer made everything work 100%.

I now have run the uninstall SQL for your new version, then deleted all the files that were uploaded. So I'm back to square one.

I can re-install v1.5 and likely get it to work as it used to using the SQL installer but wouldn't have any of the new features.

So this one works for me fine:
User Tracking - Version: v1.5 Full
Updated 12/08/2013 Version 1.5

But I see in v1.53 you added this:
User Tracking - Version: 1.5.3
1. Implemented an installation/upgrade script instead of expecting users to try to successfully run the installation sql and to
remove the need of clearing the database of existing records when performing an update that does not modify the records table.

Is that script supposed to auto-run after the files are uploaded? Or for Zen Cart v1.51 am I supposed to execute it manually?

Thanks!

Brandon

Quote:

---

Originally Posted by Nitroedge

I copied over all the files and overwrote the old ones. The User Tracking under Tools just came up blank. I checked out the config and saw the new entry for the words filter though.

Unfortunately what I think has happened is I am running ZC v1.51 and I remember when I installed your last latest version .54 first nothing worked for me, I had to go back and download the base v1.5 version with the SQL installer. Running the installer made everything work 100%.

I now have run the uninstall SQL for your new version, then deleted all the files that were uploaded. So I'm back to square one.

I can re-install v1.5 and likely get it to work as it used to using the SQL installer but wouldn't have any of the new features.

So this one works for me fine:
User Tracking - Version: v1.5 Full
Updated 12/08/2013 Version 1.5

But I see in v1.53 you added this:
User Tracking - Version: 1.5.3
1. Implemented an installation/upgrade script instead of expecting users to try to successfully run the installation sql and to
remove the need of clearing the database of existing records when performing an update that does not modify the records table.

Is that script supposed to auto-run after the files are uploaded? Or for Zen Cart v1.51 am I supposed to execute it manually?

Thanks!

Brandon

---

Yes, in version 1.5.3 an auto installer was incorporated that was written/rewritten to support updating previous installations of User Tracking and to support new installation.

As described here below and in conversation with bumba000, it was identified that the installer provided in this version of User Tracking is missing an important line of code as highlighted below in red.

To explain how it works (or how it is supposed to have worked but because of others reporting issues with installation I had "tried" to rewrite the code that was actually perfectly fine, but in rewriting I had made it more complex, then when I tried to restore it back to its original state I made a last minute decision when zipping the file to remove the sort thinking that it wasn't necessary), the installer directory is reviewed, files that are not applicable are removed, the current highest plugin version is identified and then for any version that is older than the currently installed version that installer file is executed. To do this requires first a list of all the files in descending order (documented note is incorrect), then remove all of the undesirable files to get to the first/most recent version. Then as long as there is a file remaining in the list, reverse the list sequence and if the file is an installer that is newer than the current version, execute it.

So, I would say to resolve the issue and have the latest update (ran this last night on a few different ZC versions), update the admin/includes/init_includes/init.user_tracking.php file to contain the below 'sort($installers);' line, then upload all of the files to your server. The plugin will auto-install and contain all of the features requested.

Quote:

---

Originally Posted by mc12345678

So, issue was in both some note taking and a modification made in the admin/includes/init_includes/init.user_tracking.php file.

a sort function was removed that is needed.

Code:

---

  if (sizeof($installers) > 0) {
      $newest_version = $installers[0];
      $newest_version = substr($newest_version, 0, -1 * $file_extension_len);

      if (version_compare($newest_version, $current_version) > 0) {
          foreach ($installers as $installer) {
              if (substr($installer, strrpos($installer, '.')) == $file_extension && (preg_match('~^[^\._].*\.php$~i', $installer) > 0 || $installer != 'empty.txt')) {
                  if (version_compare($newest_version, substr($installer, 0, -1 * $file_extension_len)) >= 0 && version_compare($current_version, substr($installer, 0, -1 * $file_extension_len)) < 0) {
                      include($module_installer_directory . '/' . $installer);
                      $current_version = str_replace("_", ".", substr($installer, 0, -1 * $file_extension_len));
                      $db->Execute("UPDATE " . TABLE_CONFIGURATION . " SET configuration_value = '" . $current_version . "', set_function = 'zen_cfg_select_option(array(\'" . $current_version . "\'),' WHERE configuration_key = 'CONFIG_" . $module_constant . "_VERSION' LIMIT 1;");
                      $messageStack->add("Installed " . $module_name . " v" . $current_version, 'success');
                  }
              }
          }
      }
  }

---

modified to:

Code:

---

  if (sizeof($installers) > 0) {
      $newest_version = $installers[0];
      $newest_version = substr($newest_version, 0, -1 * $file_extension_len);

      sort($installers);
      if (version_compare($newest_version, $current_version) > 0) {
          foreach ($installers as $installer) {
              if (substr($installer, strrpos($installer, '.')) == $file_extension  && (preg_match('~^[^\._].*\.php$~i', $installer) > 0 ||  $installer != 'empty.txt')) {
                  if  (version_compare($newest_version, substr($installer, 0, -1 *  $file_extension_len)) >= 0 &&  version_compare($current_version, substr($installer, 0, -1 *  $file_extension_len)) < 0) {
                      include($module_installer_directory . '/' . $installer);
                      $current_version = str_replace("_", ".", substr($installer, 0, -1 * $file_extension_len));
                      $db->Execute("UPDATE " . TABLE_CONFIGURATION . " SET  configuration_value = '" . $current_version . "', set_function =  'zen_cfg_select_option(array(\'" . $current_version . "\'),' WHERE  configuration_key = 'CONFIG_" . $module_constant . "_VERSION' LIMIT  1;");
                      $messageStack->add("Installed " . $module_name . " v" . $current_version, 'success');
                  }
              }
          }
      }
  }

---

The scandir function is intended to return the list in descending order. This allows quickly identifying if there is a new version associated. The note next to that action is incorrect identifying that the order is instead ascending. The second sort (missing in the download) is to organize the list to apply the updates in sequence and to prevent running recognized undesirable files. It was a sort of last minute "fix" thinking that by removing it the file was being returned back to more of its original state.

---

@nitroedge,

I also uploaded a new version, 1.5.6, to github that addresses the issue described and modified the installation instructions only slightly.

Though I'd really like to submit a version that does more than what is covered in the above post.

I have submitted version 1.5.6 for review.
When made available should be downloadable from: https://www.zen-cart.com/downloads.php?do=file&id=159

Primarily adds an error log if the install file is loaded to the store instead of admin, corrects the error I made in the installer in the most recent upload, and modified the instructions a little to make some minor improvements.

Quote:

---

Originally Posted by mc12345678

I have submitted version 1.5.6 for review.
When made available should be downloadable from: https://www.zen-cart.com/downloads.php?do=file&id=159

Primarily adds an error log if the install file is loaded to the store instead of admin, corrects the error I made in the installer in the most recent upload, and modified the instructions a little to make some minor improvements.

---

Hi there,

Ok I did a clean install and added that line as requested.

#1. Zen Cart executed the full installation beautifully.
#2. I properly configured the User Tracking mod.
#3. I verified in phpMyadmin that the new user_tracking table is present. Perfect.

BUT

When I go to the actual results page now I get the proper Admin toolbar but then below that everything is blank. No debug errors as well.

What is interesting is I view source on the page and I see all the data properly being reported but it's all commented out!? Weird eh? So the data is there but it's somehow being commented out.

Looks like this:

<!-- header_eof //-->

<!-- <table border="0" width="100%" cellspacing="0" cellpadding="0"> -->
<!-- <tr>
<td valign="top" align="center">
<table border="0" width="95%" cellspacing="0" cellpadding="2">-->
<!--<span class="UTBox-cart">-->
<!-- </tr> -->
<!-- <tr>
<td class="dataTableContent" align="right" valign="top"><b>--><!--</b></td>
<td class="dataTableContent" valign="top"><font color="FF0000"><b>--><!--</b></font></td>
<td class="dataTableContent UTBox" colspan="2" rowspan="4" align="center">-->
<!--<span class="UTBox">--><!--</span></td>
</tr>-->
<!--<tr>
<td class="dataTableContent" align="right" valign="top"><b>Country:</b></td>
<td class="dataTableContent" valign="top"><img src="images/flags/ca.gif" border="0" alt="Canada" title=" Canada ">&nbsp;Canada</td>
</tr>-->
<!--
<tr>
<td class="dataTableContent" align="right" valign="top"><b>IP Address:</b></td>
<td class="dataTableContent" valign="top"><a href="http://www.dnsstuff.com/tools/whois.ch?ip=207.6.90.165" target="_new">207.6.90.165</a></td>
</tr>
<tr>
<td class="dataTableContent" align="right" valign="top"><b>Host:</b></td>
<td class="dataTableContent" valign="top">d207-6-90-165.bchsia.telus.net</td>
</tr>
<tr>
<td class="dataTableContent" align="right" valign="top"><b>Originating&nbsp;URL:</b></td>-->
<!-- <td class="dataTableContent" align="left" valign="top" colspan="3"><a href="/" target="_new">/</a>&nbsp;</td>
</tr>
<tr>
<td class="dataTableContent"></td>
<td class="dataTableContent" colspan="3">-->
<!-- <table border="0" cellspacing="1" cellpadding="2" bgcolor="999999" width="100%">-->
<!--<span class="UTBox-cart">-->
<!-- </tr> -->
<!-- <tr>
<td class="dataTableContent" align="right" valign="top"><b>--><!--</b></td>
<td class="dataTableContent" valign="top"><font color="FF0000"><b>--><!--</b></font></td>
<td class="dataTableContent UTBox" colspan="2" rowspan="4" align="center">-->
<!--<span class="UTBox">--><!--</span></td>
</tr>-->
<!--<tr>
<td class="dataTableContent" align="right" valign="top"><b>Country:</b></td>
<td class="dataTableContent" valign="top"><img src="images/flags/ca.gif" border="0" alt="Canada" title=" Canada ">&nbsp;Canada</td>
</tr>-->
<!--
<tr>
<td class="dataTableContent" align="right" valign="top"><b>IP Address:</b></td>
<td class="dataTableContent" valign="top"><a href="http://www.dnsstuff.com/tools/whois.ch?ip=207.6.90.165" target="_new">207.6.90.165</a></td>
</tr>
<tr>
<td class="dataTableContent" align="right" valign="top"><b>Host:</b></td>
<td class="dataTableContent" valign="top"></td>
</tr>

That's kind of messed up. Line 1078 of admin/user_tracking.php should have

Code:

---

echo$boxes['body']->infoBox($emptybgheading, $row['body']);

---

Which should appear just before a commented out </form> tag at the bottom of the code.

The commented out code is what "used" to be displayed (for the most part) and was left there to support comparison of new and old designs.

But, the tables should still be presented unless there is some sort of css that has been generically applied that would hide the table content. :/

When I tested this on ZC 1.5.5 there were some differences between that display and when used in an older ZC 1.5.3, but not so much so that the content was not present.

In "viewing" the computer code I don't see an unbalanced html comment, but would have to put the results through a validator of sorts to figure out what happened. Of course could just remove all of the html commented text as well which is expected to resolve that. But, I didn't have any major or minor differences between my running version and the fileset. :/

See if just before the <?php and echo that follows that adding --> fixes the display.

I've just downloaded the version from ZC, the version from github, compared it to what I have on my test systems, loaded a future date (as one had reported an issue with a future date as compared to the system time and here is what shows up on my ZC 1.5.5e system using PHP 7.1.

Attachment 17140

In the admin file there is only one difference between the last and current version of the admin/user_tracking.php file which is an addition of {} around code that follows an if statement to improve readability.

So, the only other thing I can imagine is that there is some sort of css on the admin that is different than the base files and because not every aspect is defined by the plugins css that possibly other things are hidden?! I can't know for sure without performing a similar comparison or review of the affected system... I would hope that something specific can be found, but I haven't been able to duplicate the described condition.

Quote:

---

Originally Posted by mc12345678

See if just before the <?php and echo that follows that adding --> fixes the display.

---

Sorry, I did try adding a --> right before the beginning of that PHP section that contains the key line you quoted.

Spent the last hour trying to add -->'s in different places without any luck.
Whenever I add in "-->" I do see them echo'd when I refresh the page.

I shouldn't have any custom CSS on the admin side.

I did though get it at one point to show some of the data but of course it was difficult to read with no line spacing and proper tables showing.. Doing this method, I would refresh the page and then view the page source and see something like this, then trial and error to continue trying to remove the additional commenting lines. My problem is I'm not too coding skilled and can't tell which elements need to be there :)

Would the perfect way to approach this be to go from the start and then make sure everything I delete is "contained" with a beginning comment start and comment end?

Thanks for your patience with me on this, I just love your mod! Especially since you took the time to add in that filter feature.

Brandon

Just for fun and testing, I uploaded an old v1.5 of the user_tracking.php file and it shows everything perfectly, albeit of course without the new features. The filesize being half the size of the new 1.5.5 one :)

Thanks for checking that.

When you say "the only difference between the last and current version"...
I guess for me that would be this one:
Updated 12/08/2013 Version 1.5

in comparison to your brand new:
Version: 1.5.5

I'll dig into the CSS then if you think that could be it.
I see I'm loading on that page just these 2:
<link rel="stylesheet" type="text/css" href="includes/stylesheet.css">
<link rel="stylesheet" type="text/css" href="includes/cssjsmenuhover.css" media="all" id="hoverJS">

I'm actually comparing 1.5.6 and 1.5.5 as far as versions.

BTW, I've uploaded a version that does not have the "newly" created commenting such that only the new table type display should be presented.

You can find it at: https://github.com/mc12345678/User_T...emove_comments

Would appreciate some feedback on it. Also what browser are you using? I've been using firefox primarily.

I'm actually using Firefox as well and as I mentioned Zen Cart v1.51.

I used the new file you provided overwriting the old one, and this is really weird.

I get no content loaded, just the typical admin style menu and then the bottom centered Zen Cart logo.

What is weird is here is all the HTML after the <!-- header_eof //-->:

(You can see it just is posting essentially nothing)

<!-- body_text_eof //-->

<table border="0" width="100%" cellspacing="4" cellpadding="4" bgcolor="FFFFFF" align="center">
<tr class="infoBoxHeading">
</tr>
</table>
<table border="0" width="100%" cellspacing="4" cellpadding="4" bgcolor="FFFFFF" align="center">
<tr>
</tr>
<tr bgcolor="ffffff">
</tr>
</table>

<!-- body_eof //-->

<!-- footer //-->
<table border="0" width="100%" cellspacing="10" cellpadding="10">
<tr>
<td align="center" class="smallText" height="100" valign="bottom"><a href="http://www.zen-cart.com" target="_blank"><img src="images/small_zen_logo.gif" alt="Zen Cart:: the art of e-commerce" border="0"></a><br /><br />E-Commerce Engine Copyright &copy; 2003-2017 <a href="http://www.zen-cart.com" target="_blank">Zen Cart&reg;</a><br /><a href="https://scor-pal.com/workshop/server_info.php">Zen Cart v1.5.1/v1.5.1</a></td>
</tr>
</table>


<!-- footer_eof //-->
<br />
</body>
</html>

I also just tried something out of interest. I tried in Chrome/Firefox and Edge for all 3.

I uploaded v1.5.5 admin/user_tracking.php and I get as I mentioned the page loads but then all the table data is reported but commented out.

I uploaded v1.5.4 same file and I get a blank page completely so nothing loads (not the menu, etc.).

I uploaded v1.5.3 same file and it works flawlessly seeing all the data.

I uploaded v1.5.2 same file and it also works flawlessly.

Quote:

---

Originally Posted by Nitroedge

I also just tried something out of interest. I tried in Chrome/Firefox and Edge for all 3.

I uploaded v1.5.5 admin/user_tracking.php and I get as I mentioned the page loads but then all the table data is reported but commented out.

I uploaded v1.5.4 same file and I get a blank page completely so nothing loads (not the menu, etc.).

I uploaded v1.5.3 same file and it works flawlessly seeing all the data.

I uploaded v1.5.2 same file and it also works flawlessly.

---

So, that makes me wonder about the fileset on the system related to table generation. I mean I have considered possibly providing a specific table file, but figured if it were possible with the builtin/existing unchanged software, then that seemed ideal, but you say that there are no mydebug logs being generated as a result of this, are there any being generated from the admin side? Ie. can you create an error condition and cause an error to be generated?

Then also see how the following files differ from a vanilla ZC 1.5.1 installation:
admin/includes/classes/box.php
admin/includes/classes/table_block.php

I'm wondering/somewhat thinking that even in the older version(s) where the box class was used that perhaps it wasn't displaying in your setup for some reason...

Ackkk.. I figured it out... Somewhere between ZC 1.5.1 and 1.5.5, the admin/includes/classes/table_block.php file changed ever so slightly, but just enough that it at least impacted this operation to where "nothing" gets displayed in ZC 1.5.1. So, gotta figure out the best way to provide all of the "support" for the plugin to work and to not negatively affect other plugins. Guess either I could provide the files necessary to maybe offer the individual design(s) or in this case provide the "minor" fix that was applied to ZC 1.5.2 and above (which ideally would also be applied to ZC 1.5.1 to make better use of the table_block class. I'll add this to the instructions, though ideally you know you would also update to a more recent version of ZC at this point considering that ZC 1.5.1 is more than 5 years old.

https://github.com/zencart/zencart/c...2024f66dd1f33c

Thanks again for taking the time to help me out!
I'm super new to Github and trying to understand how it works. I see that your link shows the alterations to the 2 files and I was wondering how I do I actually download the 2 files in their altered format?

Quote:

---

Originally Posted by Nitroedge

Thanks again for taking the time to help me out!
I'm super new to Github and trying to understand how it works. I see that your link shows the alterations to the 2 files and I was wondering how I do I actually download the 2 files in their altered format?

---

From an Internet search on 'github download single file repo', I was presented with the following "instructions":

Quote:

---

Go to the file you want to download.
Click it to view the contents within the GitHub UI.
In the top right, right click the Raw button.
Save as...

---

So from the link above you can click in the upper right of each file (though really it is only the second file that has a change that affects operation, the removal of the closing php section is more about preventing future issues than something functional.

Anyways, the information provided in the links above should have been enough to identify where in the file(s) to make the change(s). Hopefully the question was more about general usage. Suggest reading through the github instructions/help file(s).

Thanks, worked perfectly and I can report the page is loading correctly now with all the new features and functionality.

I have been testing it and the only problem I have is I am getting the following error in the admin debug logs each time I view the report:

[16-Jul-2017 07:50:39 America/Detroit] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in user_tracking.php on line 283

This error occurs whether I have show/hide spiders or show/hide filters on. It appears to occur each time the User Tracking report is loaded or refreshed.

Quote:

---

Originally Posted by Nitroedge

Thanks, worked perfectly and I can report the page is loading correctly now with all the new features and functionality.

I have been testing it and the only problem I have is I am getting the following error in the admin debug logs each time I view the report:

[16-Jul-2017 07:50:39 America/Detroit] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in user_tracking.php on line 283

This error occurs whether I have show/hide spiders or show/hide filters on. It appears to occur each time the User Tracking report is loaded or refreshed.

---

I see why/how it is generated. When first going through the records, if $user_tracking hasn't been declared as an array() (which I thought it had, but I see that it wasn't) then when testing if a key is in the non-declared array an error like that could be expected. This is done by inserting a line before the while (!$whos_online->EOF related line that has:

Code:

---

$user_tracking = array();

---

Alternatively that if statement:

Code:

---

    if ($user_filter_search == 'HideOnly' && array_key_exists('filterwordfound', $user_tracking[$whos_online->fields['session_id']])) {

---

Could be made false earlier by inserting

Code:

---

&& !empty($user_tracking)

---

in the if statement after 'HideOnly'. Logic analysis will stop as soon as a false condition is encountered as evaluated from left to right following an order of precedence.

I'm thinking the first solution of establishing the variable as an array is the better solution (1 assignment to put the variable in a known and needed state of being an array and it does not increase processing for each loop by basically evaluating if $user_tracking is an array on each loop), but I need to look at the code that is after the while loop to see if the code that follows would behave incorrectly in the condition that there were no records to review/retrieve.

And yup, just after the closing curly parenthesis of the while loop the check is if $user_tracking is an array. :P this same check is used later in the code as well. So more does need to be changed than just adding the one line to prevent generating that warning which I guess I'm surprised has been supressed in the environment tested. Here at the is_array($user_tracking) == true would want to instead use the !empty($user_tracking) check instead when using the previous $user_tracking = array(); statement.

Alright patch coming up... :)

Patch posted at github to eliminate the warning message on the admin side:
https://github.com/mc12345678/User_T...14374bb14b621a

Now to see if it can be inserted into the code that was uploaded/updated earlier this week or if I need to generate yet another newer version. :)

Wouldn't want someone to come along, not read this forum, download the fileset, it generate a mydebug log for each time the report is accessed and then to say hey, this plugin is crap because it generated an warning..... (Sorry, been somewhat tracking the behavior of plugin usage/dismissal. I REALLY thank YOU for pointing out the issues that you have identified. As I say, without knowing that there is a problem and how to recreate it, there is nothing (known) to fix.)

I must say that I don't like the idea that have to tell users of ZC 1.5.1 (and likely 1.5.0) that they really need to upgrade because there was really an error that was introduced/in existence back in those versions that prevented proper use of the code... Ie. It seems a waste to have to provide either/both the table_block.php and/or box.php classes in such a way that they are functional when at this time, nothing additional is really being done. Yeah, overall the presentation of the data would be better/easier if a unique "box" style were provided in the plugin because I've been trying to get creative at not displaying the "header" of the box, but here and there a "top" is still present. If I "took control" of the box class for UT (by providing a separate box class), then when I don't want a header it would be easier by just not providing a header and only providing content and I'd be able to control some of the internal formatting a little better. Just hadn't had the "need" to do that for myself when all I want is to see the data that is provided. :)

Realized that still needed to do the test of !empty in the if statement at least when hide only was selected... so, the new single change/patch that addresses all of the locations for this is at: https://github.com/mc12345678/User_T...a4c809b7449861, the previously provided link will still "work" but it will not resolve the warning that was observed. Overall, the code is better because of the change, but the only thing that was needed to prevent that message was the !empty($user_tracking) that I was trying not to include if I didn't have to. :)

The master branch is also up-to-date with these changes.

Quote:

---

Originally Posted by mc12345678

Patch posted at github to eliminate the warning message on the admin side:
https://github.com/mc12345678/User_T...14374bb14b621a


Now to see if it can be inserted into the code that was uploaded/updated earlier this week or if I need to generate yet another newer version. :)

Wouldn't want someone to come along, not read this forum, download the fileset, it generate a mydebug log for each time the report is accessed and then to say hey, this plugin is crap because it generated an warning..... (Sorry, been somewhat tracking the behavior of plugin usage/dismissal. I REALLY thank YOU for pointing out the issues that you have identified. As I say, without knowing that there is a problem and how to recreate it, there is nothing (known) to fix.)

I must say that I don't like the idea that have to tell users of ZC 1.5.1 (and likely 1.5.0) that they really need to upgrade because there was really an error that was introduced/in existence back in those versions that prevented proper use of the code... Ie. It seems a waste to have to provide either/both the table_block.php and/or box.php classes in such a way that they are functional when at this time, nothing additional is really being done. Yeah, overall the presentation of the data would be better/easier if a unique "box" style were provided in the plugin because I've been trying to get creative at not displaying the "header" of the box, but here and there a "top" is still present. If I "took control" of the box class for UT (by providing a separate box class), then when I don't want a header it would be easier by just not providing a header and only providing content and I'd be able to control some of the internal formatting a little better. Just hadn't had the "need" to do that for myself when all I want is to see the data that is provided. :)

---

Fantastic and glad I could help. The reason I still run v1.51 is because my template is so heavily modified it would be a real task (and risk to having the store down for awhile) to merge all the files and update to v1.55. I will try out your new file and report back, thanks!

Uploaded the new file and works with the default options loaded. No debug log file is generated.

But if you change the default Filter option (List All) and select (Hide Filtered), you should see it will refresh the data but then create a similar debug error on line 285.

"[16-Jul-2017 18:43:19 America/Detroit] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in user_tracking.php on line 285

The problem seems to be isolated to the above scenario.
No errors are reported if you choose (Show Filtered), or change the (Min Clicks) option, or (Show/Hide Spiders) options. No errors are also reported if you choose different dates as well. :)

You, unlike me at the time of testing, must have had at least one visit recorded.

*sigh* I knew I should have focused more on the true solution and not just what seemed to work.

Explanation: when the setting is to filter out the undesirables, then the first criteria of the if statement is satisfied as true. When the loop has been executed at least once, the second criteria is true (!empty), but, on that second "trip" the applicable session may not have been the same as before and therefore there may not be a record (non-empty sub-array) and therefore the code attempts to check for a key against a basically non-assigned array which is what throws that warning.

So need yet another && !empty($user_tracking[$whos_online->fields['session_id']]) inserted after the first !empty($user_tracking)

Bugger. :/ at least DrByte has also offered some optimization improvements that would make the resubmission of the latest more worth while. :)

Will be issuing version 1.5.8 to ZC in the next couple of days, at least. This version can be found on github at the version 1.5.8 branch:

Quote:

---

Version 1.5.8:
* - Add an additional check to prevent an admin mydebug log being when the selection is made to display filtered entries to hide entries that accessed an item on the list of filtered URIs.
* - Incorporate optimizations provided by DrByte to improve the quality of the program
* - Joined admin/includes/functions/extra_functions/user_tracking.php into the function code for the catalog side which meant that was able to incorporate into the catalog observer. Functions can be reached through the use of $user_tracking_observe->zen_update_user_tracking() instead of just zen_update_user_tracking().
* - Installer is expected to remove admin/includes/classes/class.user_tracking.php and
admin/includes/functions/extra_functions/user_tracking.php if either or both are present because these files are no longer needed or used.
* - Incorporated ip data collection code into the program to support compatibility between ZC versions where for example the admin side doesn't have the same ip collection code.
* - Cleaned up the look of the code to be consistent within an individual file.

---

This modification nearly updates/modifies all files while removing some of them as well.