Customers Can't Check Out - Account Creation Problem

[nosnip]

Hello,

I maintain a website for a client that uses zen cart. They have been using for quite a few years now and have not had any problems with it.

Sometime after July 22, customers have not been able to check out. No changes have been made to the zen cart files in quite a few years and no changes at the host that I am aware of.

I went through the process and when I get to the page for login or account creation, the area to create an account is now gone. You can view the page here:
https://www.tailormaidbowstrings.com...ain_page=login

They are using: Zen Cart 1.3.7
No Upgrades
No Addons

Only customization was the colors and page header.

I search the FAQ and board and didn't not find anyone with the same problem.

Can someone help me out here please?

Thank you
Sheley

[barco57]

your were hacked, by someone using the admin vulnerability announced June 21st. To get the login page back you need to clear out the extra htl in admin>my store>store name. Then you need to follow the procedure layed out in the following post http://www.zen-cart.com/forum/showthread.php?t=130161

[nosnip]

your were hacked, by someone using the admin vulnerability announced June 21st. To get the login page back you need to clear out the extra htl in admin>my store>store name. Then you need to follow the procedure layed out in the following post http://www.zen-cart.com/forum/showthread.php?t=130161

Ok, I logged in via FTP, my site is set up like store name > admin

When I look in the admin folder, there is no folder with my store or store name.

I looked through all my files and none are dated within the last year, so how could they be hacked?

Also, the problem is with customers creating an account to order, not with me logging into the admin section. I can do that just fine.

Are you sure what you suggested is the problem? If so, how to I find the first part you mentioned?

Shelley

[nosnip]

Ok, so now I did find some strange PHP files in the images folder, removed those and double checked all my setting and everything seems fine.

Going to go through everything one more time and apply the patch.

Shelley

[barco57]

OOPS, what I meant to say is "admin>configuration>my store>store name", the store admin not the admin folder.