Hello fellow Zencarters Have a very strange problem, Hoping someone may have seen it before? Zen Cart 1.3.7 - yes antique Database: MySQL 5.5.37-35.1 Server OS: Linux 3.12.22 PHP Version: 5.2.17 (Zend: 2.2.0) Running an older version - all OK for 7 years. Suddenly all product clicks result in 404 not found. I was surprised to see that that on my front end all expected calls to (for example): http://mydomain.com/product_info.html?products_id=2576 Result in http://mydomain.com/_info.html?products_id=2576 i.e. the filename is missing! The same occurs in ADMIN admin/product.php is appearing as admin/.php upon clicking to edit a product I have checked my filesystem integrity and all seems OK ISP has not performed any recent changes (that I know of) I may have been hacked? I have checked my filesystem integrity, all seems OK Any ideas? Very strange Thanks - GSH

gsh:

Hello fellow Zencarters Have a very strange problem, Hoping someone may have seen it before? Zen Cart 1.3.7 - yes antique Database: MySQL 5.5.37-35.1 Server OS: Linux 3.12.22 PHP Version: 5.2.17 (Zend: 2.2.0) Running an older version - all OK for 7 years. Suddenly all product clicks result in 404 not found. I was surprised to see that that on my front end all expected calls to (for example): http://mydomain.com/product_info.html?products_id=2576 Result in http://mydomain.com/_info.html?products_id=2576 i.e. the filename is missing! The same occurs in ADMIN admin/product.php is appearing as admin/.php upon clicking to edit a product I have checked my filesystem integrity and all seems OK ISP has not performed any recent changes (that I know of) I may have been hacked? I have checked my filesystem integrity, all seems OK Any ideas? Very strange Thanks - GSH

.Htaccess file change(s)? Uri rewriter modification? Use of .html style files is not part of the "typical" ZC filenaming. But, all that aside? Possible that security vulnerabilities have been abused.

Thinking about it some more, I thought that product_info for example was a database related variable, and that therefore the product part of the statement may be missing... Ie, perhaps if the database was accessed, perhaps the word product had been removed? That one is a bit of a shot in the dark, but might explain. I think the listing I'm talking about can be found from myphpadmin looking at the product_types table.... Or, if you can access your admin, under catalog product types (if this all existed in Zc v 1.3.7....

thanks - will look at database tables now - checked htaccess - will paste below - have disabled SEO URL mod to be on safe side - always strange when things 'suddenly' stop working...I know this is an old version, but served me well since 2007 -- GSH

Options +FollowSymLinks
RewriteEngine On
RewriteBase /

From Ultimate SEO URLs

RewriteRule ^(.)-p-(.).html$ index.php?main_page=product_info&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.)-c-(.).html$ index.php?main_page=index&cPath=$2&%{QUERY_STRING} [L]
RewriteRule ^(.)-m-([0-9]+).html$ index.php?main_page=index&manufacturers_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.)-pi-([0-9]+).html$ index.php?main_page=popup_image&pID=$2&%{QUERY_STRING} [L]
RewriteRule ^(.)-pr-([0-9]+).html$ index.php?main_page=product_reviews&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.)-pri-([0-9]+).html$ index.php?main_page=product_reviews_info&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-ezp-([0-9]+).html$ index.php?main_page=page&id=$2&%{QUERY_STRING} [L]

For Open Operations Info Manager

RewriteRule ^(.*)-i-([0-9]+).html$ index.php?main_page=info_manager&pages_id=$2&%{QUERY_STRING} [L]

For dreamscape's News & Articles Manager

RewriteRule ^news/?$ index.php?main_page=news&%{QUERY_STRING} [L]
RewriteRule ^news/rss.xml$ index.php?main_page=news_rss&%{QUERY_STRING} [L]
RewriteRule ^news/archive/?$ index.php?main_page=news_archive&%{QUERY_STRING} [L]
RewriteRule ^news/([0-9]{4})-([0-9]{2})-([0-9]{2}).html$ index.php?main_page=news&date=$1-$2-$3&%{QUERY_STRING} [L]
RewriteRule ^news/archive/([0-9]{4})-([0-9]{2}).html$ index.php?main_page=news_archive&date=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^news/(.)-a-([0-9]+)-comments.html$ index.php?main_page=news_comments&article_id=$2&%{QUERY_STRING} [L]
RewriteRule ^news/(.)-a-([0-9]+).html$ index.php?main_page=news_article&article_id=$2&%{QUERY_STRING} [L]

All other pages

Don't rewrite real files or directories

RewriteCond %{REQUEST_FILENAME} !-f [NC]
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*).html$ index.php?main_page=$1&%{QUERY_STRING} [L]

<Files 403.shtml>
order allow,deny
allow from all
</Files>