New Customer Reg. & Product Issue

Hi, I recently volunteered to maintain a site that includes a ZenCart store. I'm a total Newbie to ZenCart and am not very experienced with php either but am trying to learn.... I went through a few recent pages of threads, but any specific help would be appreciated on the issues this store is having. Since I didn't build it, I do not know what changes have been made; I believe but can't be certain that the issues arose within the last six months?

The store site, excluding the spaces is at w w w . l l e w e l l i n s e t t e r c l u b . c o m / s t o r e

Zen Cart Version 1.3.7
PHP Version: 5.2.9 (Zend: 2.2.0)
HTTP Server: Apache

Aside from the security breach that now has pharmaceutical spam links plugged into the login page and into order confirmation emails :ohmy: , the problem I'm inquiring about is about the customer registration and product ordering.

First, there is no "Create an Account" or "New Customer" link or form, so people new to the site cannot order anything since they can't create an account. Where/how do I fix this?

Second, where do I find the add-on for the mod of ordering anonymously without having to register first? Are there any disadvantages to activating such a option?

Third, I edited a product (the 2010 Puppy Calendar) to change it from an old calendar: I only updated the title, changed the photo, changed the price, and edited the description; I left the products model label alone and everything else was unchanged. Should there be any reason that this would have messed up the product info/ordering capabilities? Should I have editted any other section of the admin stuff to take this change into account?

I added another product (Clearance 2009 Puppy Calendar) and just filled in the form provided in ZenCart; it seemed straightforward.... I was recently informed that three people had tried to order the 2010 calendar and weren't able to but I'm thinking it had to do with the customer registration issue unless I'm missing something....

I just noticed that the spam links are most likely where the registration/new account form should have been. Is it possible that the hackers replaced the form with its links?

Alright, I suppose I'd better get some of those questions answered first before I keep rattling on... :blush: Thank you very much for any insight you can provide!

Chelsea

PS. I did install the 20090619 security patch yesterday but learned that I'll have to clean up the mess the hackers have already left... in all my "spare" time :smile:

1. The hack is the reason your Create Account stuff is missing. Go to Admin - Configuration - My Store and clean the junk out of the Store Name field. You'll still need to do all the Recovering From Hacks steps.

2. Search the Free Software Add Ons above for 'cowoa'.

3. That should be all you need to do.

http://www.zen-cart.com/forum/showthread.php?t=130161

Post #2, particularly.

Thank you! I'll do as recommended.

Chelsea

I should have mentioned in #3 that the way you changed the product means that it will still have the same Zencart product id, which means that the two calendars will show up as the same product in, say, a customer's history or any sales report.

Probably bettter in the future to create a new product.

I have downloaded the security patch, and deleted the SPAM stuff from my store front..I have deleted the extra php files that were in my images folder...but now I still have the spam stuff in some of the categories pages on my site....

how do i get rid of this???

It is only on a couple of my pages.

To see an example:
http://www.scrapswithamouse.com/store/index.php?main_page=index&cPath=1
and
http://www.scrapswithamouse.com/store/index.php?main_page=index&cPath=3
and
http://www.scrapswithamouse.com/store/index.php?main_page=index&cPath=2

You'll need to edit your categories to remove that from the category description. Also, comparing all your files to known good ones is a good idea after you've been hacked. Winmerge is a good program for that.