SysCheck [support thread]

Timeout means your host has the maximum run time cranked down. Not much you can do short of getting another host.

As for people accessing your admin you should block them and change your admin folder name.

ah - ok; so those two tests (as it stands with my current host) I'll never be able to perform.

With the 'access report' - is that 'historical' or just 'recent' (ie/last few days)?

Yes - I think I will change my admin name again - I really feel quite nervous about this.

No idea how to 'block' - do you include the '-> ec....' as well?

Thanks so much again:hug:

JTheed:

Do you also have the Admin Profiles Mod? If so, you need to go to Tools/Admin Settings in your Admin Screen and look for unchecked boxes. When you install a new mod and run it the first time, it gets added to the Admin Profiles mod. You then have to go give yourself access to it by checking the appropriate box. Then when you are done, click the UPDATE button to SAVE the changes.

Thanks for the reply yeah i always update admin permissions everytime i install a new mod but this one everytime i tick it and save changes it doesnt do anything i go back in and its unclicked.

I ran syscheck and got along list of IPs under "Hosts accessing admin". I think they are all me, but I wish they also listed dates. But like mentioned earlier I can check the admin logs under myphp to see.

I access my admin when I'm on vacation and so have several different IPs that are probably from the hotels. Also access it from my iPhone, so have several mycingular.net and mobile.mymmode.com that I'm assuming/hoping are from the iPhone access.

But when it gets to "Admin users" this is what I get:

2006 MySQL server has gone away
in:
[SELECT admin_name, admin_email FROM zen_admin]
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

What do I need to do to correct this? Thank you in advance.

I suspect it's timing out. You can turn off some of the checks by editing the module.

I like the idea of printing the dates - I can print the first and last access time from each IP.

I'm going to update it to (optionally) fix the permissions since this request has come up a few times.

Scott

swguy:

I suspect it's timing out. You can turn off some of the checks by editing the module.

I like the idea of printing the dates - I can print the first and last access time from each IP.

I'm going to update it to (optionally) fix the permissions since this request has come up a few times.

Scott

Thank you that sounds great. Let us know when you've updated it.

To turn off some of the checks I'll follow your instructions below from an earlier post:

swguy:

If it's timing out, you will need to run the tests in smaller groups, maybe one at a time. In admin/syscheck.php around line 41, there are a series of flags set to true. Set them all to false, and then set them to true one by one so you can run different tests one at a time.

Scott, I reviewed the latest list of 138 Mods tested on 139 ...

http://www.zen-cart.com/forum/showthread.php?t=152679&page=24

... no status on SysCheck ... does this work on 139?

We appreciate the help!

SeanLoberg:

... no status on SysCheck ... does this work on 139?
We appreciate the help!

I'm in the middle of creating a new 1.3.9.d site - and installed the 1.0.3 Syscheck just fine. And yes - it works. :P

Hope that helps...

Yes, should be fine in 1.3.9.

Hi SWGUY,

I added your syscheck (I had a hack attempt and thought it would be prudent to review my site) and received the following error.

Fatal error: Call to undefined function get_dirs() in /home/sawhorse/public_html/hiddenadminname/syscheck.php on line 109Line 109 is below

 $files = get_dirs("..");
```I wonder if we could review what possibly could lead to this error?  Below you can see what I have added to my ZC version.
Sawhorse

You didn't install all the files (in particular, you didn't install ./admin/includes/functions/extra_functions/syscheck.php).

SWGUY,

 Well I thought that I had, but on review you are 100% correct.  No file in ./admin/includes/functions/extra_functions/syscheck.php).     

I will install.

THanks - your quick reply sounds like this has happen before.

Again Thanks.

Sawhorse

After correct install all works well.

1. It seems that all the images files that I have uploaded have either a 0755 or a 0777 permission. I assume that they should all be either 644 or 444. Correct?
2. I did see cashe as a 0600 in your report. Should that also be a 644?
3. Also, I did notice that I have an add on that has the following line of code.
   ```php
   function pl_group_is_valid($profile){
   eval('$group_name = PL_GROUP_NAME_' . $profile . ';');
   eval('$group_name_defined = defined('PL_GROUP_NAME_' . $profile . '');');

```php
    for($profile = 1; $profile <= 10; $profile++) {
        $enabled = 'false';               
        eval('$enabled = PL_ENABLE_' . $profile . ';');
        eval('$name = PL_PROFILE_NAME_' . $profile . ';');
        if(!pl_group_is_valid($profile)){
``` 
I love this addon.  Is there a problem here?
Sawhorse
  

I have found the answer to my question 3.

FAQ

Q: I'm getting eval matches on files I know are ok. How can I suppress these?
A: In the file admin/syscheck.php, look for the array $eval_ok_files. You can follow the pattern and add to this list as appropriate for the mods you have installed.

Sawhorse

90% of the time I try to run the check the page just reloads and I'm on the admin login page. Any thoughts?

-lindasdd

Syscheck was given a refresh for Zen Cart 1.5.5. I have added a bunch of new checks and anti-bad-guy recommendations for you to help keep your site safe.

Just found this plugin. Very nice. The dates on admin access would be very nice touch.