Question from noob...

[macmannorthstar]

Hi

First post here.

been asked to help a local business with their site.

Customers are making purchases and the funds are being transferred (so they tell me, via WorldPay) direct to their bank account without them getting details of what customers are ordering.

No idea what version of ZenCart is used... I've not logged in to the system yet... only know it's zen from the source code on the web page.

The old design team who produced the site has gone bust.

Any ideas as to what this might be? Long shot I know. I'll have, hopefully, more details tomorrow as to what is happening.

Thanks

Chris

[stevesh]

More details will be necessary, including answers to the questions asked when you start to post. Most CC processors include some sort of admin area you can log into to see purchases, etc. Do you have that login info ?

Once you've got to Zencart admin, are the orders there ?

[macmannorthstar]

Customers can go through to checkout pages. There is an area on the checkout pages where customers can enter their card details and pay for goods. The money is then showing up in the clients bank account, seemingly bypassing Worldpay.

However, no details are showing up in the Zencart order processing system, so the company has no idea what has been ordered.

Prior to this issue, customers could only input their card details on the Worldpay site, ie once they had left the site's checkout page. Yet now there is a section on the shop's checkout page for customers to enter card details.

They have no idea what has caused this (obviously). And swear blind nobody has changed any settings on the system.

Anything else you need?

[schoolboy]

And swear blind nobody has changed any settings on the system.

Except perhaps a hacker...

[macmannorthstar]

Except perhaps a hacker...

True. Would it be a weird hack though? Just designed to annoy?

The business itself doesn't do big numbers online. Judging by the number of orders in the last 18 months, probably no more than £10K a year.

But if there is no other reason for the page to change... then yes, could well be a hacker.

IS there any way the checkout could be changed other than human intervention?

And is there any way of tracking changes to the site? Are there particular files I should be looking at to see if there is a modification date that's recent?

[schoolboy]

You can check the Server Log at your host c-Panel, and you should also check the Admin Activity Log (via phpMyAdmin).

Look for rogue activity, and possible rogue IP addresses.

In the Admin Activity Log,try to find the date range where the behaviour changed, and see who was "responsible"