How to impliment DNS email verification? v1.3.8

[Whiterabbizt]

Hi All,

My version:

Zen Cart 1.3.8a

Patch: 1::

Database Patch Level: 1.3.8

Just not game to upgrade..

Has anyone managed to impliment Email verification in both create account and edit account functions.

My server supports PHP chkdnserr - but short of editing the .php files I can see no other way to check the emails users enter for valid domains MX or A records.

I seem to be getting quite a few users entering rubbish email address and would prefer to frustrate them to either not make an account or enter their correct email addresss.

Any sample code if we have to do it the "old Fashioned Way" would be appreciated.

Thanks in advance

[Kim]

You absolutely need to upgrade - 1.3.8 is vulnerable to several really nasty hacks - Upgrading will not take much more time than figuring out how to verify email addresses.

[Whiterabbizt]

Thanks Kim,

Was afraid that that may be the case.

Really nervous about upgrading.. Niggling fears that overides are not quite right etc..

If I bite the bullet her are my first steps:
Backup Web Site via ftp
Dump the Database via myphpadmin

Then what press the upgrade button in admin cross my fingers and then test?

Any other suggestions? Can I Make a complete clone and is there a guide you can suggest?




Have you any suggestions on:
1) How to copy my entire zen cart to another directory ( New Data

[haredo]

Yikes... NO.... NO..... NO..... no one step upgrade.....

Read this tutorials please first...

https://www.zen-cart.com/tutorials/i...hp?category=14
https://www.zen-cart.com/tutorials/index.php?article=98

[Whiterabbizt]

Hi Again,

Ok 1st link is security issues. I get it 3.8 more holes than a piece of swiss cheese.
2nd link is the upgrade docs.

My site is customised, specifically shipping modules ( no problem there because they are new files, some addons like security, Direct deposit, etc...

I think the time has come for a complete clean up, as the state of the current live site - while fully operational probably has a heap of garbage in it.

Build a complete new 3.9 (my hosting site installs it in a few minutes)
Then re-customise, test .... and then the big queestion?

Will this work?
1) Put live site down for maintenance
2) Dump SQL from live site
3) Load SQL from live site to new site
4) Go live

[Whiterabbizt]

Ok,

Just loaded 3.9 and had a look at the tables - different name etc...

Will go back to the drawing board and fully read the upgrade documentation.

PS Does 3.9 do a proper email verification? searched the code for chkdnserr and found none.

Did not find any reference to email checking in config>E-mail options either