Forums / Addon Templates / EstoreNow template Secuirty Problem?

EstoreNow template Secuirty Problem?

Locked

Started by sph on 30 Oct 2010, 8:18 PM · Views: 2,380

Results 1 to 6 of 6
This thread is locked. New replies are disabled.
30 Oct 2010, 8:18 PM
#1
sph avatar

sph

Totally Zenned

Join Date:
Jan 2006
Posts:
1,556
Plugin Contributions:
0

EstoreNow template Secuirty Problem?

While looking for an image slider I came across the new Estorenow template. Installed it on a test site. Kinda like it, but mainly interested in the slider on front page for possible live site.

Just little while ago, while editing EstoreNow main page in admin defines pages editor and looking at the code, I definitely saw my renamed admin in a bunch of code. When I hit "save" the main page on web messed-up but I definitely saw my renamed admin in View Source on the web.

Haven't yet been able to re-create seeing the admin in View Source, but still see the renamed admin in defines pages editor code.

Problem?

I'll re-name my admin.

Just re-created problem: see re-named admin in View Source on web. Happens if I look at the code in admin defines pages, then save page without doing anything! Home page slider is messed-up, but can see renamed admin in view source on web.

Steve
prommart.com

30 Oct 2010, 8:27 PM
#2
sph avatar

sph

Totally Zenned

Join Date:
Jan 2006
Posts:
1,556
Plugin Contributions:
0

Re: EstoreNow template Secuirty Problem?

Just re-created problem: I can see re-named admin in View Source on web. Happens if I look at the code in admin defines pages, then save page without doing anything! Home page slider is messed-up, but can see renamed admin in view source on web.

Originally happened while testing slider, re-naming example.com links on slider pics.

So how to edit?

Steve
prommart.com

31 Oct 2010, 6:58 AM
#3
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: EstoreNow template Secuirty Problem?

This sounds as though you are trying to make a link to something and using one of the WYSIWYG editors
It is confused by your action in the link and thinks it is in your admin path....

As it eventually look "messed up" the linking is most likely the cause

Review how you are using the editor

Zen-Venom Get Bitten

31 Oct 2010, 9:48 AM
#4
swguy avatar

swguy

Administrator

Join Date:
Feb 2006
Location:
Tampa Bay, Florida
Posts:
10,742
Plugin Contributions:
56

Re: EstoreNow template Secuirty Problem?

The estorenow template does not have an admin component. Perhaps when you're editing the product you are accidentally pulling images from admin/images instead of images.

That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.

31 Oct 2010, 2:33 PM
#5
picaflor_azul avatar

picaflor_azul

Totally Zenned

Join Date:
Jul 2009
Location:
picaflor-azul.com
Posts:
6,940
Plugin Contributions:
28

Re: EstoreNow template Secuirty Problem?

Just re-created problem: I can see re-named admin in View Source on web. Happens if I look at the code in admin defines pages, then save page without doing anything! Home page slider is messed-up, but can see renamed admin in view source on web.

Yes, when editing this in the define pages editor in the admin you should select "plain text" in the text editor drop down menu. If you restore the page and then edit it with the "plain text" it will work :smile:

31 Oct 2010, 5:28 PM
#6
sph avatar

sph

Totally Zenned

Join Date:
Jan 2006
Posts:
1,556
Plugin Contributions:
0

Re: EstoreNow template Secuirty Problem?

Thanks for the replies.

I would originally open the defines page with html editor, then go to view source code. Saw the messed code/admin.

Maybe it'll work with just plain editor, I'll see.

However, I almost didn't catch my re-named admin on the web so I consider this a potential security flaw. Warning should come with this slider, IMO.

Thanks.

Steve
prommart.com