Greetings, I seem to be having the same problem as mentioned above with the opening post.
However, I am aware that I made some changes to some .htaccess files and also some permission changes to directories after my cart got hacked. My problem has only been noticed with one order so far, but it is clear there is a problem with the IPN situation.
The changes I made to the .htaccess files were actually to prevent paypal snooping around on my site as they previously blacklisted me and froze my funds for sellnig "unacceptable" items. After these changes were made my shopping cart processed several orders succesfully, with reporting, order completetion, etc. I got the IP addresses from another post on this forum and they were said to be only the addresses Paypal uses to snoop and not the IPs used for IPNs. My experience post changes leads me to believe this is truth, as all worked great.
Then, I realized my site got hacked encoded with base_64 decode BS and links added to the bottom of every page of my google "cached pages" to BS illicit sites. I replaced many of the php files with the installation versions and figure I got the hacked garbage thoroughly removed. I don't think this is the problem either (the php file replacement),
I am guessing the problem may lie in the .htaccess files as I removed the 'write" permission from many of my zen-cart directories. So, I think this is a good place to start looking. Here is my question: Which folders need the write access enabled for zen-cart to function properly? Which could be messing up the IPN by having write access removed? Any help on this would be appreciated.
Also, many thanks to the authors of Zen-cart I have been having great experiences with it and alot of fun. I know nothing about php but I am good at learn-as-you-go and this forum has been great reads for helpful ideas... Thanks!
I have not yet run through some sample orders in debug mode but I am about to do that and see if that helps. Any info would be greatly appreciated. Even if I do end up fixing the problem in the next hour or so, I would still appreciate the knowledge of which folders should be allowed writeable. As far as I am concerned I would like to remove write permission from every folder except the ones needed for zen-cart to function properly.
Thanks Zen-Cart team, you people rock!
:)