VirtueMart Forum

VirtueMart 2 + 3 + 4 => General Questions => Topic started by: peaceandlove on August 30, 2013, 15:37:32 PM

Title: Where does 'Need more infomration about product' Store
Post by: peaceandlove on August 30, 2013, 15:37:32 PM
We have a button a VM where a buyer can request more infomation about products.

I want to know where does this information stores and we can see at back end.
Title: Re: Where does 'Need more infomration about product' Store
Post by: jenkinhill on August 30, 2013, 15:40:30 PM
It is not added to the database. The request is emailed to the vendor.
Title: Re: Where does 'Need more infomration about product' Store
Post by: peaceandlove on August 30, 2013, 15:41:55 PM
Our website is [link to hacked site removed]

Actually, my client is complaining that he has recieved the following email from their host

Quote'We have found that pharmacy URLs have been placed in your code. We request that you review your site and its code to make sure it is secure, and we request that you remove these illegal pharmacy links. To find this information, you can view your page source and do a search for custard or mild.

The most common types of exploitation are vulnerabilities in PHP, ASP or CGI code or the theft of your password via a "dictionary attack". If this is the case, it is certainly unfortunate, but does not change the fact that you are responsible for the security of your domain and web hosting.

We also suggest that you run a spyware and virus check on the computer(s) that you use to access this hosting account, as it could also be possible that malicious software on your system is responsible for the compromise.

My client also send me that he found link at

QuoteBlue Butterfly Hair Extensions

ronny has requested more information on Seamless Tape Hair Extensions (Product-SKU: Seamless Tape Hair Extensions)

product_image

Tape Hair Extensions is a fairly new method, they are faster to apply than most hair applications, undetectable and the least amount of damage to your hair. Will last for 2-3 months, Hair can be re used.

Question

cZIrTh http://www.5EWalaK3zaEFzKWsK72EARLchwGWGEmy.com

ronny, normy273@hotmail.com

I am not sure where to find other links of such types , and how to remove those.

Looks like it comes from Request more information form, so where does this information store, and how can i safe guard it in future.

I also want to find other such links so how can i found those.

Our current site is 1.5 should we upgrade it , does it make problem
Title: Re: Where does 'Need more infomration about product' Store
Post by: jenkinhill on August 30, 2013, 16:48:24 PM
Your site has been hacked. All Joomla 1.5 versions were found to have a security hole about a month ago, and an unofficial patch was released.  http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626

Also it is possible that you were sill using an old vulnerable extension, such as JCE which has been associated with hundreds of j1.5 site hacks.

I suggest you follow the procedure in the J1.5 security forum - http://forum.joomla.org/viewtopic.php?f=432&t=475313  as it may not be possible to salvage the site. It is important to remove all traces of a hack and any backdoors left open for future attacks.

VirtueMart 2 is no longer supported for use on Joomla 1.5  -  http://virtuemart.net/news/list-all-news/426-end-of-life-for-virtuemart-11-heidelpay-now-in-virtuemart-2012

"We decided to declare now the end of life for VirtueMart 1.1, and that the version 2 of VirtueMart is not any longer maintaining joomla 1.5 compatibility." 4 October 2012