Product Linking to another website potential issue

30 Jan 2013, 4:12 PM

New Zenner

Join Date:: Jan 2007
Location:: England
Posts:: 83
Plugin Contributions:: 0

Product Linking to another website potential issue

Hello,

Is there a way to stop someone from using the redirect as below?

http://www.yourshop.co.uk/index.php?main_page=redirect&action=url&goto=www.malicious-website.co.uk

Is it possible to implement a whitelist of domains that the redirect will only work for?

many thanks

Iwebshop.co.uk Ecommerce Solutions

30 Jan 2013, 4:15 PM

kobra

Black Belt

Join Date:: Aug 2005
Location:: Arizona
Posts:: 31,500
Plugin Contributions:: 4

Re: Product Linking to another website potential issue

That would have to be on the server where yourshop.co.uk resides(DNS)
Lock down the server

Zen-Venom Get Bitten

30 Jan 2013, 6:05 PM

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: Product Linking to another website potential issue

Sure: You can write your own custom code for whitelisting in /includes/modules/pages/redirect/header_php.php for case 'url'.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.