Page 1 of 2 12 LastLast
Results 1 to 10 of 26

Hybrid View

  1. #1
    Join Date
    Jun 2007
    Posts
    42
    Plugin Contributions
    0

    Default Security or hacking issues ?

    We see constant errors on the domain server for our domain.

    It does have your newest 1.3.8a update and problem still occured.
    The hosting service says it was a ZEND code issue and made these changes :

    Zend]
    zend_extension_manager.optimizer=/usr/local/Zend/lib/Optimizer-3.3.3
    zend_extension_manager.optimizer_ts=/usr/local/Zend/lib/Optimizer_TS-3.3.3
    zend_optimizer.version=3.3.3

    zend_extension=/usr/local/Zend/lib/ZendExtensionManager.so
    zend_extension_ts=/usr/local/Zend/lib/ZendExtensionManager_TS.so

    What did this code do and what does the code changes resolve.

    what is seen via error logs on server the host service claims is not just our domain but all those domains on that server using your software.,

    Stats via admin function of frontstore show 200-400 users a day when we really only have a view customers a month and "who is online" function shows many of thiose user hits coming from outside the USA where our content is only in english yet hits are from countires like china, russia, etc that do not use english as a norm.


    MAIN error_log:
    [Wed Sep 10 09:41:26 2008] [error] [client 58.8.56.144] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/scoop/list.p..._from=&ucat=43[Wed Sep 10 09:41:27 2008] [error] [client 58.8.56.144] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/scoop/list.p..._from=&ucat=43[Wed Sep 10 09:41:28 2008] [error] [client 58.8.56.144] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/scoop/list.p..._from=&ucat=43[Wed Sep 10 09:41:29 2008] [error] [client 68.103.4.173] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://bonsaichainsaw.com/index.php[Wed Sep 10 09:41:29 2008] [error] [client 74.6.22.112] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:29 2008] [error] [client 58.8.56.144] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/scoop/list.p..._from=&ucat=43[Wed Sep 10 09:41:30 2008] [error] [client 74.6.17.151] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:30 2008] [error] [client 72.20.99.20] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.broadcasthealth.com/category/Sports_Fitness[Wed Sep 10 09:41:31 2008] [error] [client 209.85.238.18] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:32 2008] [error] [client 209.68.66.124] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://qd9z.net/index.php?q=aHR0cDov...U1ZTJmMWNjNTQ2[Wed Sep 10 09:41:33 2008] [error] [client 209.68.66.124] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://qd9z.net/index.php?q=aHR0cDov...NmYTEwY2ZmN2M1[Wed Sep 10 09:41:33 2008] [error] [client 66.249.67.106] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:36 2008] [error] [client 38.99.68.197] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:38 2008] [error] [client 68.103.4.173] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://bonsaichainsaw.com/index.php?board=27.0[Wed Sep 10 09:41:44 2008] [error] [client 66.249.67.106] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:45 2008] [error] [client 70.15.64.209] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:45 2008] [error] [client 66.249.67.106] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:46 2008] [error] [client 66.249.67.106] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:47 2008] [error] [client 68.103.4.173] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://bonsaichainsaw.com/index.php?topic=3054.84[Wed Sep 10 09:41:47 2008] [error] [client 167.206.189.3] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:49 2008] [error] [client 167.206.189.3] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:41:56 2008] [error] [client 77.103.137.186] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.uddingstongrammar.com/Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:42:02 2008] [error] [client 70.15.64.209] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://bonsaichainsaw.com/index.php[Wed Sep 10 09:42:03 2008] [error] [client 72.20.99.20] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.broadcasthealth.com/category/Sports_Fitness[Wed Sep 10 09:42:03 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.google.co.th/search?um=1&...-8&sa=N&tab=iw[Wed Sep 10 09:42:03 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:04 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:04 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:04 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:05 2008] [error] [client 166.70.158.134] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:42:06 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:06 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:06 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:06 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:06 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:07 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:07 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:08 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:08 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:08 2008] [error] [client 202.29.55.70] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/travel.php?s..._from=&ucat=29[Wed Sep 10 09:42:10 2008] [error] [client 125.24.63.124] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.google.co.th/search?sourc...b8%b2%e0%b8%a2[Wed Sep 10 09:42:11 2008] [error] [client 74.6.22.112] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:42:13 2008] [error] [client 4.176.27.95] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:42:18 2008] [error] [client 125.24.63.124] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/content/%E0%...%B2%E0%B8%A2-0[Wed Sep 10 09:42:25 2008] [error] [client 68.103.4.173] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://bonsaichainsaw.com/index.php?...num_replies=86[Wed Sep 10 09:42:28 2008] [error] [client 68.103.4.173] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://bonsaichainsaw.com/index.php?...num_replies=86[Wed Sep 10 09:42:28 2008] [error] [client 125.24.63.124] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/content/%E0%...%B2%E0%B8%A2-0[Wed Sep 10 09:42:30 2008] [error] [client 125.24.63.124] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.sadoodta.com/content/%E0%...%B2%E0%B8%A2-0[Wed Sep 10 09:42:33 2008] [error] [client 72.20.99.20] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.broadcasthealth.com/category/Sports_Fitness[Wed Sep 10 09:42:33 2008] [error] [client 68.103.4.173] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://bonsaichainsaw.com/index.php?board=27.0[Wed Sep 10 09:42:35 2008] [error] [client 200.179.65.3] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals[Wed Sep 10 09:42:41 2008] [error] [client 212.11.171.66] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.chennaimetroblogs.com/category/personal/[Wed Sep 10 09:42:44 2008] [error] [client 69.88.6.142] Failed loading /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: /usr/local/Zend/lib/Optimizer/php-5.2.x/ZendOptimizer.so: undefined symbol: compiler_globals, referer: http://www.google.com/search?hl=en&c...efox-a&channel

  2. #2
    Join Date
    Jun 2003
    Posts
    33,721
    Plugin Contributions
    0

    Default Re: Security or hacking issues ?

    ZEND is not Zen Cart and has nothing to do with the program. You have a problem on your server and need to talk to your host.
    Please do not PM for support issues: a private solution doesn't benefit the community.

    Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

  3. #3
    Join Date
    Oct 2006
    Location
    Alberta, Canada
    Posts
    4,571
    Plugin Contributions
    1

    Default Re: Security or hacking issues ?

    When a Hoster makes Server changes that cause problems for your site then your Hoster is the one you should talk to about the problems.

    As to the error msgs. and presuming "sadoodta.com" is not your site, they are trying to do something they shouldn't and are being blocked; which shows up as an error. If it is your site and you think whatever is trying to be done should work, then you should be talking to your Hoster as it would be a Server problem.

  4. #4
    Join Date
    Jun 2007
    Posts
    42
    Plugin Contributions
    0

    Default Re: Security or hacking issues ?

    Thanks for the replies.

    I agree then the error log on the host server is not pointing to the problem or concerns which is

    the daily history counters shown on main admin page report as many as 400 users in just 1 day when in fact we only get a few sales a month and when looking at "who is online" most we see is users (IP addresses) from outside the USA like russia, china etc and being our frontstore is english only content this adds up to a conern as what hundreds of users are doing as no signs they are going to product pages.

    Since we do not publicly market the frontstore most do not even know it exists and thus even 100 valid visitors a day is suspect and not sure these connections are not getting in and stealing what customer have bought products and all their private credit card and personal information or doing something by hooking into the cart software ?

    Counter History for last 10 recorded days Session - Total
    09/10/2008 124 - 144
    09/09/2008 414 - 470
    09/08/2008 389 - 412
    09/07/2008 215 - 313
    09/06/2008 174 - 177
    09/05/2008 144 - 165
    09/04/2008 368 - 402
    09/03/2008 112 - 136
    09/02/2008 107 - 185
    09/01/2008 171 - 192

  5. #5
    Join Date
    Jan 2004
    Posts
    66,446
    Plugin Contributions
    81

    Default Re: Security or hacking issues ?

    If you look at the "refer:" addresses in the logs you posted, you'll notice that those sites come from various places around the world. And, the fact that they're in your logs as referers suggests that something on "those" websites is a link back to *your* website.
    That's likely where your increased traffic is coming from.

    You may have to do some research to track down what's on their site that resembles a link to your URL.

    I suppose it's possible that maybe they're all victims of a hack exploitation where someone's put links from their site to your site and maybe specifically into an exploit on *your* server that they're trying to create a curtain to hide behind.

    While none of this specifically implicates anything specific to Zen Cart, your site may have been compromised.

    I recommend that you treat it as though your site *may* have been compromised, and follow all the steps for recovering from hacks, as documented here:

    http://www.zen-cart.com/wiki/index.p...ing_From_Hacks

    I would also recommend the research of those other sites and ask their owners to take off the links to your site.


    Moving this out of the Bug Reports area
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  6. #6
    Join Date
    Nov 2004
    Location
    Norfolk, United Kingdom
    Posts
    3,036
    Plugin Contributions
    2

    Default Re: Security or hacking issues ?

    Check with your hosts to see if any of those other sites are on the same server. In which case the errors appearing in your logs may be the result of a busted server.

    It appears from the log, and your comments about what they did with regard to Zend and Zend Optimiser, that they have broken their PHP installation, probably as the result of a badly applied upgrade. It's possible that they have a version of Zend and Zend Optimiser which is not matched to the version of PHP they are using (they have to match).

    Vger

  7. #7
    Join Date
    Jun 2007
    Posts
    42
    Plugin Contributions
    0

    Default Re: Security or hacking issues ?

    Quote Originally Posted by DrByte View Post
    If you look at the "refer:" addresses in the logs you posted, you'll notice that those sites come from various places around the world. And, the fact that they're in your logs as referers suggests that something on "those" websites is a link back to *your* website.
    That's likely where your increased traffic is coming from.

    You may have to do some research to track down what's on their site that resembles a link to your URL.

    I suppose it's possible that maybe they're all victims of a hack exploitation where someone's put links from their site to your site and maybe specifically into an exploit on *your* server that they're trying to create a curtain to hide behind.

    While none of this specifically implicates anything specific to Zen Cart, your site may have been compromised.

    I recommend that you treat it as though your site *may* have been compromised, and follow all the steps for recovering from hacks, as documented here:

    http://www.zen-cart.com/wiki/index.php/Recovering_From_Hacks

    I would also recommend the research of those other sites and ask their owners to take off the links to your site.
    ----------------------------------------
    ----------------------------------------

    Thanks

    the URL you point to as to recovering from hacks :

    We cannot compare orginal Zencart files as we did not manually install the software as it is a function of the hosting service.

    Orginally we simply clicked on a install function as hostmonster the host has Zencart as a program and it installs the software into our domain directory. Until last week Version 1.3.7 was being used and this security problem was seen.

    Hostmonster had the newest 1.3.8a and we simply hit a update icon on hostmonster and it does the software updating thus we do not have the orginal files.

    Doing the update process I assume overwrote all the files of V 1.3.7 and same issue is seen with new files being used so you'd think if someone hacked a Zencart file it was overwritten and problem would have went away but its not with V 1.3.8.

    In using the "check MySQL" for database of Zencart on hostmonster I see

    teamzron_zc1.ubbt_BANNED_USERS OK teamzron_zc1.ubbt_BBCODE OK
    teamzron_zc1.ubbt_CACHE warning : 3 clients are using or haven't closed the table properly status : OK
    teamzron_zc1.ubbt_CACHED_PERMISSIONS warning : 3 clients are using or haven't closed the table properly
    -------------------------
    At that time I saw only ONE user on Zencart but SQL check says 3 clients have not closed the table properly
    Is that any clue with those warnings shown ?

    Is there any log for Zencart so we could see all visitors who were on the frontstore for the day to backtrack where they came from ?
    Last edited by teamzr1; 11 Sep 2008 at 04:28 PM.

  8. #8
    Join Date
    Jun 2003
    Posts
    33,721
    Plugin Contributions
    0

    Default Re: Security or hacking issues ?

    Why are you so worried about the spiders? You need them to get your pages in the search engines?
    Please do not PM for support issues: a private solution doesn't benefit the community.

    Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

  9. #9
    Join Date
    Apr 2007
    Location
    Herts. UK
    Posts
    890
    Plugin Contributions
    4

    Default Re: Security or hacking issues ?

    @teamzr1...
    You should apply the fix that DrByte posted in the above mentioned thread. Also check that in Admin > Configuration >Sessions you have the following set...
    Force Cookie Use: False
    Prevent Spider Sessions: True

    Doing the above three things will ensure that spiders do not add to the session counter on the admin page. They will still crawl your site and you'll still see them in Who's Online and that is fine.

    Regards,
    Christian.

  10. #10
    Join Date
    Jun 2007
    Posts
    42
    Plugin Contributions
    0

    Default Re: Security or hacking issues ?

    Force cookie use is set to false and prevent spider sessions is set to true
    and the code change was done but
    still seeing sessions that are supposed to be blocked ?

    00:13:26 0 ¥Spider 66.249.67.106 11:35:10 11:36:43
    Time Since Clicked:
    00:11:53 ago Session ID:
    Host: crawl-66-249-67-106.googlebot.com
    User Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
    /fstore/index.php?main_page=advanced_search&keyword=interface&search_in_description=1&in c_subcat=0&sort=20a&alpha_filter_id=74

    00:05:50 0 ¥Spider 61.247.222.55 11:42:46 11:42:46
    Time Since Clicked:
    00:05:50 ago Session ID:
    Host: 61.247.222.55
    User Agent: Yeti/1.0 (NHN Corp.; http://help.naver.com/robots/)

    ---------------

    As to the question why focusing in on this ?

    Well when you see high daily counts, zero real users, what visitors you do see are from other countires and not your own then you have to suspect, play it save and determine the WHYs.

    When your customers who have their private info from past purchases are in Zen Cart then clearly we need to know the end results, 20/20 hindsight is one thing but not knowing the WHYs is not good enough with customer information or someone hacking and using our domain by some backdoor into the frontstore ? ? ?

 

 
Page 1 of 2 12 LastLast

Similar Threads

  1. ie security issues
    By AmandaGero in forum General Questions
    Replies: 2
    Last Post: 11 Sep 2010, 05:59 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg