Forums / Basic Configuration / Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

Locked

Started by satzin123 on 22 Mar 2009, 7:48 PM · Views: 3,106

Results 1 to 10 of 10
This thread is locked. New replies are disabled.
22 Mar 2009, 7:48 PM
#1
satzin123 avatar

satzin123

New Zenner

Join Date:
Mar 2009
Location:
Hyderabad, India
Posts:
5
Plugin Contributions:
0

Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

Please solve my issue.

My Website URL is.. http://www.bannersandphotos.com/shopping/

There is issue with my Zencart, I am getting an Error Message that this page contains "Secured/Unsecured" Items Message.

My Website is hosted on "HostGator"... I have checked with Host Gator ppl.. they said.. there is issue with the "Zencart"..

After lot of research on Web.. the issue which I found is.. If a SSL Page contains any links which point to third part site.. then.. it will display "Secured/Unsecured" error message.

So, I started checking the Page Links and I found that there is one link.. I don't know how to remove it from the zencart. I don't understand why exactly it is there?? How to remove it.. no information is there..

The "Link" which is hidden in the "Zencart" is.. http://triplex.lazyfish.cc

Why exactly it is there?? to my surpirse.. It will be inactive in the mornings.. and it will be active in the nights.. Is that a "hacker" link???

CAN ANYONE HELP ME OUT WITH THIS BUGGY URL??

I have attached the screenshot.. which will explain the issue.

Any Takers??

My Website URL is.. http://www.bannersandphotos.com/shopping/

22 Mar 2009, 7:53 PM
#2
yellow1912 avatar

yellow1912

Totally Zenned

Join Date:
Oct 2006
Posts:
5,422
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

Given that the link is not in the default zen, whoever coded your template must have put it there.

You can use the developer tool kit in admin->tools to search for that link.

I no longer provide installation support on forum for all my modules. However, if there are real bugs with the modules please feel free to contact me

22 Mar 2009, 8:00 PM
#3
satzin123 avatar

satzin123

New Zenner

Join Date:
Mar 2009
Location:
Hyderabad, India
Posts:
5
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

I have checked using Developer Tool Kit.. It is unable to find anything..

Any more thoughts ??

22 Mar 2009, 8:03 PM
#4
yellow1912 avatar

yellow1912

Totally Zenned

Join Date:
Oct 2006
Posts:
5,422
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

You have this bunch of malicious code at the end of your page code. I suspect the site has been hijacked. First you have to figure out where the code comes from, probably some where in your current template files, or even the main index.php.

Follow this link as well: http://www.zen-cart.com/wiki/index.php/Recovering_From_Hacks

And you also have to check if this is done by the designer/coder or some one hacked into your site. Then take appropriate actions.

I no longer provide installation support on forum for all my modules. However, if there are real bugs with the modules please feel free to contact me

22 Mar 2009, 8:16 PM
#5
satzin123 avatar

satzin123

New Zenner

Join Date:
Mar 2009
Location:
Hyderabad, India
Posts:
5
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

I have checked the "Templates".. I even rolled back to the default one.. but the issue is still same..

And.. there is no change in the index.php file..

However, thank you very much for the information. Please suggest any other solutions.

22 Mar 2009, 8:39 PM
#6
tony_sar avatar

tony_sar

Totally Zenned

Join Date:
Jul 2006
Location:
Montreal, Canada
Posts:
2,276
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

currently there is a inline javascript that has been added to your site by hacker(s) i believe is pointing to a site triplex . lazyfish . cc

you may want to check all your files for that and secure your site

22 Mar 2009, 9:04 PM
#7
satzin123 avatar

satzin123

New Zenner

Join Date:
Mar 2009
Location:
Hyderabad, India
Posts:
5
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

I have checked all the files.. seems that is in the encrypted format.. when I search for those strings.. it is unable to get anything..

Any more suggestions please.. :blink::oops::cry::dontgetit

22 Mar 2009, 9:52 PM
#8
tony_sar avatar

tony_sar

Totally Zenned

Join Date:
Jul 2006
Location:
Montreal, Canada
Posts:
2,276
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

using developer tool kit , search for this ( use the last field for search and choose catalog / admin from dropdown to search all zen cart files. )

RvgiQFtpQ

this is DIV id that contains a Iframe that has been embeded into your site that points to another site .

zencart has no iframe .

23 Mar 2009, 2:02 AM
#9
satzin123 avatar

satzin123

New Zenner

Join Date:
Mar 2009
Location:
Hyderabad, India
Posts:
5
Plugin Contributions:
0

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

Yes, I have checked that. But it isn't showing any search results using "Developers Tool Kit".

That piece of code is getting generated dynamically. How to get rid of it.. :dontgetit:huh::unsure::wacko::oops:

23 Mar 2009, 3:03 AM
#10
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: Issue with Zen-Cart >> Secured/Unsecured Pages >> SSL >> HTTPS

To find that code, you need to compare ALL of your files, both the regular files AND all your custom/override files, against the original versions of those files for your version of Zen Cart. That means more than just your "template" files or your "index.php" file. Everything. In all folders.
http://www.zen-cart.com/wiki/index.php/Recovering_From_Hacks
http://www.zen-cart.com/wiki/index.php/Troubleshoot_-_Diagnosing_Obscure_Issues
https://www.zen-cart.com/tutorials/index.php?article=323
http://winmerge.sf.net

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.