Zen Cart Logo
Forums / General Questions / Here's a weird one

Here's a weird one

Views: 919

Results 1 to 8 of 8
5 May 2011, 2:10 AM
#1
jenpen avatar

jenpen

Zen Follower

Join Date:
Sep 2007
Location:
Far South Coast, NSW, Australia
Posts:
427
Plugin Contributions:
0

Here's a weird one

My client was very pleased with himself yesterday - he had been locked out of Admin and managed to reset the password by "doing an sql query on the database and re-setting it". So far so good, and I admit I was impressed. But... somehow, he has converted the Submit button on his Contact page to a password request.
http://mklcraft.com/MKLgallery/index.php?main_page=contact_us

I am trying to find the file to replace. I have tried over-writing tpl_contact_us_default.php but nothing changes. Looking up bits of the errant code in Developer's Toolkit - no results. So it must be a database thing. Where to start? Much obliged...

5 May 2011, 7:24 AM
#2
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: Here's a weird one

Start by looking at the file modified dates through FTP

Zen-Venom Get Bitten

5 May 2011, 11:53 PM
#3
jenpen avatar

jenpen

Zen Follower

Join Date:
Sep 2007
Location:
Far South Coast, NSW, Australia
Posts:
427
Plugin Contributions:
0

Re: Here's a weird one

Yikes! We've had a hacker...

6 May 2011, 12:45 AM
#5
jenpen avatar

jenpen

Zen Follower

Join Date:
Sep 2007
Location:
Far South Coast, NSW, Australia
Posts:
427
Plugin Contributions:
0

Re: Here's a weird one

Yep, onto it. Thanks!

6 May 2011, 12:47 AM
#6
haredo avatar

haredo

Totally Zenned

Join Date:
Apr 2006
Location:
Texas
Posts:
6,187
Plugin Contributions:
0

Re: Here's a weird one

Your welcome and good luck and take your time...
Remember the override file structure on your upgrade..

Need a hand with Zen Cart? Hire the team at myZenCartZone.com for upgrades, repairs, and custom plugins.

Zen Cart Certified hosting at myZenCartHost.com.

6 May 2011, 12:56 AM
#7
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: Here's a weird one

We've had a hacker...Please save youself some time and perform ALL the steps and I really do mean ALL steps

Zen-Venom Get Bitten

6 May 2011, 1:21 AM
#8
jenpen avatar

jenpen

Zen Follower

Join Date:
Sep 2007
Location:
Far South Coast, NSW, Australia
Posts:
427
Plugin Contributions:
0

Re: Here's a weird one

Thanks haredo and kobra,
Another client got hacked once before, I've done it all once already. Here we go again. What's the chance of that, I'm only running about 8 zen carts and two break-ins.
What's nice this time around is that it's always been a 'showcase' so nothing sensitive there. The hacker must have been disappointed.