Zen Cart Logo
Forums / Basic Configuration / New security update - trying to fix

New security update - trying to fix

Locked

Views: 4,332

Results 1 to 15 of 15
This thread is locked. New replies are disabled.
18 Aug 2006, 11:29 AM
#1
bryankollar avatar

bryankollar

Zen Follower

Join Date:
Mar 2006
Location:
Trucksville, PA
Posts:
125
Plugin Contributions:
0

New security update - trying to fix

I can't reply to the new security threat message, so I hate to start a new topic here.

You stated to find this line:
include($base_dir . $loader_file);

and add that other line above it?

I can't find that line.

I am in the directory /includes, and looking at the file application_top.php

Can this be anywhere else?

I didn't go any further yet until I can find this line

Thanks guys

18 Aug 2006, 12:06 PM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: New security update - trying to fix

Are you using v1.3.0x ?

18 Aug 2006, 6:09 PM
#3
bryankollar avatar

bryankollar

Zen Follower

Join Date:
Mar 2006
Location:
Trucksville, PA
Posts:
125
Plugin Contributions:
0

Re: New security update - trying to fix

Using version 1.3.0.2

18 Aug 2006, 6:23 PM
#4
designbydemeter avatar

designbydemeter

Zen Follower

Join Date:
Jun 2006
Location:
Taos,NM
Posts:
225
Plugin Contributions:
0

Re: New security update - trying to fix

If you use a PHP or text editor with line counting turned on, it takes away the brain damage.

20 Aug 2006, 8:07 PM
#5
ellienor avatar

ellienor

New Zenner

Join Date:
Jan 2006
Posts:
1
Plugin Contributions:
0

Re: New security update - trying to fix

Can someone please tell me how to find a reputable zen cart person who can do these security updates for me? I have one store that was built in October 2005. I dont even know what version this is, and cant see how to tell that.

Thanks.
EG

20 Aug 2006, 9:06 PM
#6
misty avatar

misty

Inactive

Join Date:
Apr 2004
Location:
UK
Posts:
5,752
Plugin Contributions:
1

Re: New security update - trying to fix

I dont even know what version this is, and cant see how to tell that.
Log in as admin, select tools, then server/version info
HTH :smile:

21 Aug 2006, 1:00 AM
#7
bryankollar avatar

bryankollar

Zen Follower

Join Date:
Mar 2006
Location:
Trucksville, PA
Posts:
125
Plugin Contributions:
0

Re: New security update - trying to fix

DesignbyDemeter:

If you use a PHP or text editor with line counting turned on, it takes away the brain damage.

Yes, I have one. But that line is no where to be found in my file.

I did a text search on it too.

Please assist. Thanks!

21 Aug 2006, 2:05 AM
#8
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: New security update - trying to fix

I guess it comes down to this: You have either got a double-spaced file and all your line-numbers are off, or you've got a bad upgrade, or you have a bad file. So... post the contents of the file in question and then we can compare it with an original of the same file .... or, you could do the same thing yourself...

21 Aug 2006, 2:30 AM
#9
bryankollar avatar

bryankollar

Zen Follower

Join Date:
Mar 2006
Location:
Trucksville, PA
Posts:
125
Plugin Contributions:
0

Re: New security update - trying to fix

Well, since I did the searching of text, and couldn't find it, it really doesn't make sense why its not there.

I tried to post my file, but it wouldn't let me because its too large.

Here's a direct download to it:

http://www.bryankollar.com/application_top.zip

Thanks!

21 Aug 2006, 2:39 AM
#10
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: New security update - trying to fix

Bryan,
what site are you trying to upgrade,
the site in your signature isnt 1.3 its a 1.2x site

21 Aug 2006, 3:12 AM
#11
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: New security update - trying to fix

What does the version info say here:
Admin->Tools->Server Info

21 Aug 2006, 12:55 PM
#12
bryankollar avatar

bryankollar

Zen Follower

Join Date:
Mar 2006
Location:
Trucksville, PA
Posts:
125
Plugin Contributions:
0

Re: New security update - trying to fix

My apologies. your right. My site is 1.2.6

Thanks anyway

21 Aug 2006, 2:08 PM
#13
cirque_samsara avatar

cirque_samsara

New Zenner

Join Date:
Jun 2006
Posts:
14
Plugin Contributions:
0

Re: New security update - trying to fix

I'm having a somewhat similar situation.

I downloaded all the files that were listed in the Security Update posted by the good Doctor and could find none of the code listed, this using Dreamweaver with line numbers on, + after doing text searches.

I upgraded to 1.3.0.1 on Friday (Aug. 18) - would this make a difference?

ANy aid much appreciated.

NIk

21 Aug 2006, 4:49 PM
#14
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: New security update - trying to fix

You should upgrade to v1.3.0.2 ... then apply the fixes ...

21 Aug 2006, 4:55 PM
#15
cirque_samsara avatar

cirque_samsara

New Zenner

Join Date:
Jun 2006
Posts:
14
Plugin Contributions:
0

Re: New security update - trying to fix

Thanks Ajeh

I've been running ZenCart through Fantastico with the C-Panel, so my server does much of the installation work for me. At this point my server/fantastico isnot offering the newest upgrade.

I'll contact my server.

Many thanks again!

NIk