Hi,
Before 1.5 I could execute certain scripts like easypopulate from outside of zen-cart via remote scripts. I can no longer execute easypopulate from the outside. What can I do to get this ability back. I have an automated system to upgrade my site that is now broken.
Please help!
Mike Cassidy
Thread: External Admin scripts
Results 1 to 4 of 4
-
25 Jun 2012, 09:37 PM #1
New Zenner
- Join Date
- Sep 2004
- Posts
- 39
- Plugin Contributions
- 0
External Admin scripts
-
25 Jun 2012, 09:48 PM #2
Sensei
- Join Date
- Jan 2004
- Posts
- 66,444
- Plugin Contributions
- 279
Re: External Admin scripts
Security has been greatly improved and tightened in v1.5.0 so that unauthorized scripts (ie: things running without logging in) can't damage the cart.
All admin scripts which change data must properly use form POSTs instead of GETs and must have a valid securityToken in them, which is only available to logged-in user sessions.
You will need to update your scripts accordingly..
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
25 Jun 2012, 10:33 PM #3
New Zenner
- Join Date
- Sep 2004
- Posts
- 39
- Plugin Contributions
- 0
Re: External Admin scripts
Hi. Thanks for the quick reply, but. How do I create a script that logs in and then executes easypopluate? Any help here would be appreciated.
-
26 Jun 2012, 01:08 AM #4
Sensei
- Join Date
- Jan 2004
- Posts
- 66,444
- Plugin Contributions
- 279
Re: External Admin scripts
If I recall correctly there's a cron-based currency-exchange-rate update addon that might be helpful for inspiration for your custom scripting requirements.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Reply With Quote
Similar Threads
-
Running custom admin scripts from PHP CLI?
By mdegrandis in forum General QuestionsReplies: 4Last Post: 21 Jul 2011, 10:02 PM -
external php scripts in content area?
By gg1965 in forum General QuestionsReplies: 2Last Post: 3 Mar 2011, 12:12 AM
