Security has been greatly improved and tightened in v1.5.0 so that unauthorized scripts (ie: things running without logging in) can't damage the cart.
All admin scripts which change data must properly use form POSTs instead of GETs and must have a valid securityToken in them, which is only available to logged-in user sessions.
You will need to update your scripts accordingly.
Thread: External Admin scripts
Results 1 to 4 of 4
Threaded View
-
25 Jun 2012, 09:48 PM #2
Sensei
- Join Date
- Jan 2004
- Posts
- 66,446
- Plugin Contributions
- 81
Re: External Admin scripts
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Reply With QuoteSimilar Threads
-
Running custom admin scripts from PHP CLI?
By mdegrandis in forum General QuestionsReplies: 4Last Post: 21 Jul 2011, 10:02 PM -
external php scripts in content area?
By gg1965 in forum General QuestionsReplies: 2Last Post: 3 Mar 2011, 12:12 AM
