Zen Cart Logo
Forums / General Questions / Failure to apply anti-SQL injections guidelines

Failure to apply anti-SQL injections guidelines

Locked

Views: 1,524

Results 1 to 4 of 4
This thread is locked. New replies are disabled.
21 Aug 2006, 12:06 PM
#1
theodore avatar

theodore

New Zenner

Join Date:
Oct 2005
Posts:
7
Plugin Contributions:
0

Failure to apply anti-SQL injections guidelines

I am using :
Siteground host
Fantastico was used to initially install Zen Cart v1.3.0.2
Zen Cart v1.3.0.2
Filezilla ftp program
Notepad to apply edits to scripts

I received an e-mail from Zen Cart support team to apply changes to specific files
in order to prevent SQL injections in my shop.

I used Filzilla and notepad to find the code to be changed
I applied simple copy paste method

The result was disaster!

The files I viewed and the files I changed all lost their return characters.
They are just one big string.

The main problem is with application_top.php
I tried to re enter all the return characters but I get alll sorts of errors, the code is
a big mess.

I do not have a backup of application_top.php

I think I will have a heart attack.

Please help!!!

21 Aug 2006, 12:27 PM
#2
tinas avatar

tinas

Totally Zenned

Join Date:
Jan 2005
Location:
Lake Havasu, AZ
Posts:
1,090
Plugin Contributions:
0

Re: Failure to apply anti-SQL injections guidelines

I have zipped the files and attached them for you. These are ONLY the security fix applied files.

Hope that helps :)

EDIT: Attachment removed so that people do not download it and install on the wrong version. Please just follow the edit instructions directly.

21 Aug 2006, 3:54 PM
#3
theodore avatar

theodore

New Zenner

Join Date:
Oct 2005
Posts:
7
Plugin Contributions:
0

Re: Failure to apply anti-SQL injections guidelines

TinaS I thank you so much for your quick answer.
If I could I would kiss the ground you walk on.
But as I suspected from the size of application_top.php you send me (5KB to replace the existing 41KB) I didn't get anything to work.

The answer is this Zen Cart 1.2.5!!!
Because there is no reference of my current version in admin's homepage I thought
that my version is 1.3.0.2 but in reality is 1.2.5

I know what you are thinking but I assure you I am not that stupid!

Any idea where I can get the 1.2.5 correct files before I apply the upgrade?

Thank you

21 Aug 2006, 4:20 PM
#4
theodore avatar

theodore

New Zenner

Join Date:
Oct 2005
Posts:
7
Plugin Contributions:
0

Re: Failure to apply anti-SQL injections guidelines

No worries I found the 1.2.5 version in sourceforge and have made the replacements needed.

If someone is to deal with computers he needs to be calm, very calm in a Zen kind of way.

Thank you TinaS
Great photo by the way...