Products deleted from DB

[earmsby]

Hi,

I just had an issue with my client's zen cart store where somehow all the categories , products and product descriptions were deleted. Actually not all were deleted, there were 3 products left and 2 categories.

My host said it was an SQL injection but I was pretty sure that ZC is locked down pretty well against that kind of thing. The host is restoring the DB as I type but I'm not sure what I can do to keep this from happening again.

I am on ZC v. 1.3.8a, php v. 5.2.5 and MySQL 5.0.54.

Any thoughts?

[Vger]

I'm not saying it wasn't an sql injection, but I've never come across an sql injection that just wipes products and categories from a database.

My best advice is to let your hosts restore from their backup and then wait and see if it happens again.

Provided that you have renamed the Zen Cart 'admin' folder and protected it with .htaccess protection as well as the Zen Cart admin login then your site should be fully secure.

Vger

[earmsby]

Thanks. That's what I thought too. Seemed weird that just a few tables would be effected. It also seemed very coincidental that it happened to be the tables that my client was working with at the time it happened! :)

My theory is that my client (who tends to click before she thinks), somehow deleted all her categories and products in fell swoop.

[Vger]

Beware of clients with "twitchy finger" syndrome :-D

Vger

[DPM]

I've had the same thing happen to me twice now where all the categories and products were wiped out. This time round the backups havn't been done and my host is saying they also don't have any backups. Does this mean im basically screwed?

[charmedbytina2]

I've had the same thing happen to me twice now where all the categories and products were wiped out. This time round the backups havn't been done and my host is saying they also don't have any backups. Does this mean im basically screwed?

Do you keep older copies of your db backups? Try using one of those if you do.

Tina

[DPM]

We thought we'd set it up to automatically update but all the update files are empty so we basically have nothing.