User tracking mod

[Christoff]

Hello, I just installed the latest version and when I click on Tools -> User Tracking I get a 500 error. Config -> User Tracking Config works.

I'm running ZenCart v1.5.5. I'm not sure if I've ever installed this before but I do remember years ago using Super Tracker..

My update history:
Database Patch Level: 1.5.5

v1.5.5 [2016-04-22 03:00:51] (Version Update 1.5.4->1.5.5)
v1.5.4 [2016-04-22 03:00:51] (Version Update 1.5.3->1.5.4)
v1.5.3 [2016-04-22 03:00:50] (Version Update 1.5.2->1.5.3)
v1.5.2 [2016-04-22 03:00:50] (Version Update 1.5.1->1.5.2)
v1.5.1 [2013-12-05 05:48:47] (Version Update 1.5.0->1.5.1)
v1.5.0 [2013-12-05 05:48:47] (Version Update 1.3.9->1.5.0)
v1.3.9h [2011-08-14 11:41:12] (Version Update 1.3.8->1.3.9h)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)

Thanks

[mc12345678]

Hello, I just installed the latest version and when I click on Tools -> User Tracking I get a 500 error. Config -> User Tracking Config works.

I'm running ZenCart v1.5.5. I'm not sure if I've ever installed this before but I do remember years ago using Super Tracker..

My update history:
Database Patch Level: 1.5.5

v1.5.5 [2016-04-22 03:00:51] (Version Update 1.5.4->1.5.5)
v1.5.4 [2016-04-22 03:00:51] (Version Update 1.5.3->1.5.4)
v1.5.3 [2016-04-22 03:00:50] (Version Update 1.5.2->1.5.3)
v1.5.2 [2016-04-22 03:00:50] (Version Update 1.5.1->1.5.2)
v1.5.1 [2013-12-05 05:48:47] (Version Update 1.5.0->1.5.1)
v1.5.0 [2013-12-05 05:48:47] (Version Update 1.3.9->1.5.0)
v1.3.9h [2011-08-14 11:41:12] (Version Update 1.3.8->1.3.9h)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)
v1.3.8 [2009-03-21 19:09:40] (Fresh Installation)

Thanks

A few things as not discussed, have you applied the patch of post 748 and what is the error log that is/was generated? (see your logs directory and this FAQ: http://www.zen-cart.com/content.php?124-blank-page)

[Christoff]

A few things as not discussed, have you applied the patch of post 748 and what is the error log that is/was generated? (see your logs directory and this FAQ: http://www.zen-cart.com/content.php?124-blank-page)

Applying that patch fixed it!

This was the error in the log file:
[16-Jun-2017 10:46:45 UTC] PHP Fatal error: Class 'user_tracking_admin' not found in /home/**********/public_html/includes/autoload_func.php on line 79

No error now.

Thanks for your assistance! :)

[mc12345678]

Applying that patch fixed it!

This was the error in the log file:
[16-Jun-2017 10:46:45 UTC] PHP Fatal error: Class 'user_tracking_admin' not found in /home/**********/public_html/includes/autoload_func.php on line 79

No error now.

Thanks for your assistance! :)

Glad that it worked and thank you for posting back. As soon as I can, I'd like to make the downloadable plugin one that doesn't require any additional fixes to support out-of-the box operation.

The error message though related to the issue appears to identify that at the time at least one file had not been loaded to the server. It strikes me somewhat odd the difference between that error message and the one that led to the solution of the previous post.

[Nitroedge]

Is there anyway to hide or not show all the robot hacker visits that try to access files like "wplogin.php" as I can see so many user sessions where this is accessed:

search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advanced_search

I'm running Zen Cart obviously and not Wordpress but these hacker attempts distract from the "real" customers I am analyzing data from :)

Anybody have any tips?

Thanks!

Brandon

[mc12345678]

Is there anyway to hide or not show all the robot hacker visits that try to access files like "wplogin.php" as I can see so many user sessions where this is accessed:

search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advanced_search

I'm running Zen Cart obviously and not Wordpress but these hacker attempts distract from the "real" customers I am analyzing data from :)

Anybody have any tips?

Thanks!

Brandon

There are a number of ways that come to mind to not display either the record of that attempt or the entire visit of that "individual" pretty much depending on what type of review is being performed and what is desired to be seen as a result.

Ie. Do you want the record to still be logged and then somehow managed when viewing records or some level of not ever logging the record?

[Nitroedge]

Thanks for the speedy reply!

I'd love to just hide them and never log them nor see them, that would be great. Just filtering them out so I can concentrate on analyzing real customers.

[mc12345678]

Thanks for the speedy reply!

I'd love to just hide them and never log them nor see them, that would be great. Just filtering them out so I can concentrate on analyzing real customers.

You say "them". Are you referring to the single line of text or the "person" that entered that line of data?

Just to try to explain a little. To prevent any log entry of a row of data means that there must be some "pre-known" list of things to not log. That could be a word list that has been generated based on previous review, or some other factor. To not log a "user", requires pretty much the same thing (pre-made list) and then possibly some action to be taken if they "trip" across one of the no-no items.

If only a single record/page visit is skipped for each "keyword" then there are likely to be time gaps between one page visit and another when looking at the recorded data. (would likely want to flag the "user" as having tried to access one of the no-no items.)

Then on the output side, if the record had been logged, such keywords could be used as a filter to prevent different types of reporting: make the "user" a spider/bot, hide the single page visit from the totals, hide the user from page views, etc...

[mc12345678]

Also, are you reviewing the data while it is on screen or through some sort of export of the table? The answer to that can change the approach significantly.

[Nitroedge]

I'm reviewing the data from the User Tracking data on my screen.

I understand what you mean by "them", the "them" is any user that tries to access:

&search_in_description=1&keyword=wp%20login%20php

The above seems to be the one consistent piece of code in each hack attempt.

Data from log from 4 users (after the user's "?zenid string):

&search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advance d_search
&search_in_description=1&keyword=wp%20login%20php&inc_subcat=0&main_page=advance d_search
&search_in_description=1&keyword=wp%20login%20php%20action%20register&inc_subcat =0&main_page=advanced_search
&search_in_description=1&keyword=wp%20login%20php%20action%20register&inc_subcat =0&main_page=advanced_search

For a short period of time I did do an IP Block on their addresses in my cPanel, but there are so many of them and from different countries I stopped doing that.
I'm curious if other people get these types of activity in their User Tracking logs?

Thanks!