Forums / Reports of Security Problems / chrome auto fill pasting cc numbers into the comments field

chrome auto fill pasting cc numbers into the comments field

Views: 212

Results 1 to 14 of 14
17 Jun 2019, 8:54 PM
#1
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

chrome auto fill pasting cc numbers into the comments field

This happens on one site and then doesn't happen on a site with nearly identical code/template/version and similar if not the same server. I know this is not a zen cart issue but am buffaloed as to why this could be happening. Less than 10 orders on this busy site have the cc in the comments field on this site - and mostly during this past month. I discovered how this could be happening when I was testing out the site to find out what was going on and this is what happened to me. Now I'm going to be more careful myself but ?

Anyone got any idea?

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

17 Jun 2019, 10:10 PM
#2
web_project avatar

web_project

New Zenner

Join Date:
Oct 2007
Location:
Stevenage, GB
Posts:
73
Plugin Contributions:
0

Re: chrome auto fill pasting cc numbers into the comments field

delia:

This happens on one site and then doesn't happen on a site with nearly identical code/template/version and similar if not the same server. I know this is not a zen cart issue but am buffaloed as to why this could be happening. Less than 10 orders on this busy site have the cc in the comments field on this site - and mostly during this past month. I discovered how this could be happening when I was testing out the site to find out what was going on and this is what happened to me. Now I'm going to be more careful myself but ?

Anyone got any idea?

can be modified the form so the field will be not autocomplete, example:
<input type="text" name="fooBar" autocomplete="off" >

  • Freelance Software Developer
17 Jun 2019, 10:23 PM
#3
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

it has been suggested to put autocomplete="off" in the form - done by editing html_output. Doesn't work. Probably because this is not a normal autocomplete in the browser as you have to choose to have to populate the entire form. But then again, I don't have this happening on the same template in another website.

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

19 Jun 2019, 6:04 PM
#4
swguy avatar

swguy

Administrator

Join Date:
Feb 2006
Location:
Tampa Bay, Florida
Posts:
10,729
Plugin Contributions:
56

Re: chrome auto fill pasting cc numbers into the comments field

Chrome autofill has (had?) a known defect where they would put the year into the Company Name field.
I'll be releasing a fix for this next month, and you can use that as a reference point for your issue.

That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.

19 Jun 2019, 7:15 PM
#5
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

Thanks for telling me I'm not nuts! Still don't understand why it happens on this one website as opposed to others with the dang near identical template.

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

19 Jun 2019, 8:25 PM
#6
swguy avatar

swguy

Administrator

Join Date:
Feb 2006
Location:
Tampa Bay, Florida
Posts:
10,729
Plugin Contributions:
56

Re: chrome auto fill pasting cc numbers into the comments field

Please PM me the URL.

That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.

19 Jun 2019, 8:33 PM
#7
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

emailed

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

19 Jun 2019, 8:37 PM
#8
swguy avatar

swguy

Administrator

Join Date:
Feb 2006
Location:
Tampa Bay, Florida
Posts:
10,729
Plugin Contributions:
56

Re: chrome auto fill pasting cc numbers into the comments field

This is not a bug in Zen Cart. Issue resolved with developer.

That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.

19 Jun 2019, 9:04 PM
#9
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

just in case someone else has this problem. There was some fishiness afoot in the database. Definitely not a zen cart problem.

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

25 Jun 2019, 2:53 PM
#10
swguy avatar

swguy

Administrator

Join Date:
Feb 2006
Location:
Tampa Bay, Florida
Posts:
10,729
Plugin Contributions:
56

Re: chrome auto fill pasting cc numbers into the comments field

Users seeing similar symptoms are advised to apply this patch:
https://github.com/zencart/zencart/pull/2471

That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.

25 Jun 2019, 3:18 PM
#11
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

but that does not actually fix the problem that was noticed from the start. The insertion of the cc number into the comments field.

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

25 Jun 2019, 3:40 PM
#12
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

Of note: the only major differences between this website and another that is using the same template is different servers. My server has an odd issue right now and I may be getting a new one but we are buffaloed as the reason why it has a problem in the first place. We've compared php settings etc and can't see it. IE: 1.5.5 and 1.5.6 cannot be installed. Upgraded, no issue but the install hangs now.

Just in case this has anything to do with my original issue.

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

25 Jun 2019, 4:20 PM
#13
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

scotch that - different servers at the same company but not mine.

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo

30 Jun 2019, 3:02 PM
#14
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: chrome auto fill pasting cc numbers into the comments field

It is definitely a database issue. I used default files with a default database. No problem. Changed to the live database which did require uploading the UPS and USPS files. Then with the default zen cart template, the problem popped up again. I have gone thru all configure settings to make sure no other errant code is inserted. Will compare default settings next but if anyone has anything to add, please feel free. Still have no idea how any of this happened but I think it's important for the fuller zen cart community to know the full story.

The full-time Zen Cart Guru. WizTech4ZC.com
New template for 2.0 viewable here: 2.0 Demo