Results 1 to 10 of 10
  1. #1
    Join Date
    Mar 2009
    Location
    Hyderabad, India
    Posts
    5
    Plugin Contributions
    0

    Default Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    Please solve my issue.


    My Website URL is.. http://www.bannersandphotos.com/shopping/

    There is issue with my Zencart, I am getting an Error Message that this page contains "Secured/Unsecured" Items Message.

    My Website is hosted on "HostGator"... I have checked with Host Gator ppl.. they said.. there is issue with the "Zencart"..

    After lot of research on Web.. the issue which I found is.. If a SSL Page contains any links which point to third part site.. then.. it will display "Secured/Unsecured" error message.

    So, I started checking the Page Links and I found that there is one link.. I don't know how to remove it from the zencart. I don't understand why exactly it is there?? How to remove it.. no information is there..

    The "Link" which is hidden in the "Zencart" is.. http://triplex.lazyfish.cc

    Why exactly it is there?? to my surpirse.. It will be inactive in the mornings.. and it will be active in the nights.. Is that a "hacker" link???

    CAN ANYONE HELP ME OUT WITH THIS BUGGY URL??

    I have attached the screenshot.. which will explain the issue.

    Any Takers??

    My Website URL is.. http://www.bannersandphotos.com/shopping/
    Attached Images Attached Images  
    Last edited by satzin123; 22 Mar 2009 at 08:51 PM. Reason: Forgot to mention the URL

  2. #2
    Join Date
    Oct 2006
    Posts
    5,477
    Plugin Contributions
    11

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    Given that the link is not in the default zen, whoever coded your template must have put it there.

    You can use the developer tool kit in admin->tools to search for that link.
    I no longer provide installation support on forum for all my modules. However, if there are real bugs with the modules please feel free to contact me

  3. #3
    Join Date
    Mar 2009
    Location
    Hyderabad, India
    Posts
    5
    Plugin Contributions
    0

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    I have checked using Developer Tool Kit.. It is unable to find anything..

    Any more thoughts ??

  4. #4
    Join Date
    Oct 2006
    Posts
    5,477
    Plugin Contributions
    11

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    You have this bunch of malicious code at the end of your page code. I suspect the site has been hijacked. First you have to figure out where the code comes from, probably some where in your current template files, or even the main index.php.

    Follow this link as well: http://www.zen-cart.com/wiki/index.p...ing_From_Hacks

    And you also have to check if this is done by the designer/coder or some one hacked into your site. Then take appropriate actions.
    I no longer provide installation support on forum for all my modules. However, if there are real bugs with the modules please feel free to contact me

  5. #5
    Join Date
    Mar 2009
    Location
    Hyderabad, India
    Posts
    5
    Plugin Contributions
    0

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    I have checked the "Templates".. I even rolled back to the default one.. but the issue is still same..

    And.. there is no change in the index.php file..

    However, thank you very much for the information. Please suggest any other solutions.

  6. #6
    Join Date
    Jul 2006
    Location
    Montreal, Canada
    Posts
    2,279
    Plugin Contributions
    0

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    currently there is a inline javascript that has been added to your site by hacker(s) i believe is pointing to a site triplex . lazyfish . cc

    you may want to check all your files for that and secure your site

  7. #7
    Join Date
    Mar 2009
    Location
    Hyderabad, India
    Posts
    5
    Plugin Contributions
    0

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    I have checked all the files.. seems that is in the encrypted format.. when I search for those strings.. it is unable to get anything..

    Any more suggestions please..

  8. #8
    Join Date
    Jul 2006
    Location
    Montreal, Canada
    Posts
    2,279
    Plugin Contributions
    0

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    using developer tool kit , search for this ( use the last field for search and choose catalog / admin from dropdown to search all zen cart files. )

    RvgiQFtpQ

    this is DIV id that contains a Iframe that has been embeded into your site that points to another site .

    zencart has no iframe .

  9. #9
    Join Date
    Mar 2009
    Location
    Hyderabad, India
    Posts
    5
    Plugin Contributions
    0

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    Yes, I have checked that. But it isn't showing any search results using "Developers Tool Kit".

    That piece of code is getting generated dynamically. How to get rid of it..

  10. #10
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

    To find that code, you need to compare ALL of your files, both the regular files AND all your custom/override files, against the original versions of those files for your version of Zen Cart. That means more than just your "template" files or your "index.php" file. Everything. In all folders.
    http://www.zen-cart.com/wiki/index.p...ing_From_Hacks
    http://www.zen-cart.com/wiki/index.p...Obscure_Issues
    https://www.zen-cart.com/tutorials/i...hp?article=323
    http://winmerge.sf.net
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v151 'Unsecured Items' with SSL
    By sle39lvr in forum General Questions
    Replies: 2
    Last Post: 6 Mar 2015, 03:19 AM
  2. https is not secured in web page, but secured in admin
    By ussefad in forum Basic Configuration
    Replies: 3
    Last Post: 4 Aug 2011, 10:03 PM
  3. Secured Pages with SSL after Zen Cart install
    By pcsdesign in forum General Questions
    Replies: 6
    Last Post: 28 Dec 2010, 02:13 AM
  4. What pages are secured w/ SSL?
    By pharry in forum General Questions
    Replies: 10
    Last Post: 26 Jul 2009, 09:30 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg