News:

Looking for documentation? Take a look on our wiki

Main Menu

VM3 admin live link in front end how to remove?

Started by polarstar, July 05, 2022, 04:13:10 AM

Previous topic - Next topic

polarstar

Goodday, trying to remove a link (new product) in the front end of my shop that opens the full virtuemart administrator console.

running on joomla 2.5. any help would be much appreciated. my first post here.

GJC Web Design

you have a major permissions problem as I can log into your admin as a visitor!!!!!!!!!!!!

check all your permissions

have removed your image as this is an open hackers invitation
GJC Web Design
VirtueMart and Joomla Developers - php developers https://www.gjcwebdesign.com
VM4 AusPost Shipping Plugin - e-go Shipping Plugin - VM4 Postcode Shipping Plugin - Radius Shipping Plugin - VM4 NZ Post Shipping Plugin - AusPost Estimator
Samport Payment Plugin - EcomMerchant Payment Plugin - ccBill payment Plugin
VM2 Product Lock Extension - VM2 Preconfig Adresses Extension - TaxCloud USA Taxes Plugin - Virtuemart  Product Review Component
https://extensions.joomla.org/profile/profile/details/67210
Contact for any VirtueMart or Joomla development & customisation

polarstar

thankyou for your reply. any chance for instructions on where to remove the link to the admin panel? This link was installed on my virtuemart shop front page during installation of software. please




Studio 42


polarstar

this is a link i do not know how to remove. i do not know whether it is a simple joomla link or not. i am trying to find out how to delete it. can anyone help me do this please. i posted a picture of the link in my front shop.

jenkinhill

Quote from: GJC Web Design on July 05, 2022, 10:37:33 AM
you have a major permissions problem as I can log into your admin as a visitor!!!!!!!!!!!!

check all your permissions

This suggests your site has been hacked and permissions changed. You should only see a new product link if logged into the front end as an admin/superadmin. Just removing the link won't change the potential issues with user permissions. There was an security issue with some older Joomla versions where a hacker could enter the admin area and change permissions for any user or all users.

So as GJC says, check all your permissions

https://docs.joomla.org/Security_Checklist/You_have_been_hacked_or_defaced
Kelvyn
Lowestoft, Suffolk, UK

Retired from forum life November 2023

Please mention your VirtueMart, Joomla and PHP versions when asking a question in this forum

polarstar

this is the link i am trying to delete, any instructions on how would be most appreciated: /index.php?option=com_virtuemart&tmpl=component&view=product&task=edit&virtuemart_product_id=0&manage=1

thankyou for the permissions advice.

Studio 42

We cannot advice youu, if we have no details.
Does this lin display in the menu or in a specific module ?
Perhaps a screenshot or a link to your shop, if the link is public available can help

GJC Web Design

the link was the standard FE admin link when u are logged in as a super admin except that it is shown to all users and works..

This is why I removed his screen shot as anyone has access to his admin ( as I did)

Of course the link can be removed from the html but he doesn't seem to take seriously that his permissions are completely wrong and anyone can access his admin though I see now the shop has been put on maintenance

GJC Web Design
VirtueMart and Joomla Developers - php developers https://www.gjcwebdesign.com
VM4 AusPost Shipping Plugin - e-go Shipping Plugin - VM4 Postcode Shipping Plugin - Radius Shipping Plugin - VM4 NZ Post Shipping Plugin - AusPost Estimator
Samport Payment Plugin - EcomMerchant Payment Plugin - ccBill payment Plugin
VM2 Product Lock Extension - VM2 Preconfig Adresses Extension - TaxCloud USA Taxes Plugin - Virtuemart  Product Review Component
https://extensions.joomla.org/profile/profile/details/67210
Contact for any VirtueMart or Joomla development & customisation

polarstar

This incorrect link appears in my shop front, here is a screenshot. I have asked three times already for help, instructions on exactly how to remove it please. I have received good advice on my permissions problem which i am already aware of and trying to find someone to help set them correctly for me.

but for NOW, if anyone can tell me exactly how to deactivate/ remove this link from the shopfront, it would be most appreciated. /index.php?option=com_virtuemart&tmpl=component&view=product&task=edit&virtuemart_product_id=0&manage=1 

I also understand i could be hacked or that many other things are wrong with my setup. But for now if it is possible to remove or deactivate this link on my shopfront page, and someone has instructions on exactly how to do that. it would be most appreciated. This is my second day on this forum and two weeks now trying to get my VM shop going. I am very grateful for this software. and thankyou for removing the picture with my actual site link and thankyou for the link to the instructions on what to do to check if hacked. thankyou.

Jörgen

As GJC already has explained if you would have the time to read his answers.

This link is ONLY active if You have super admin rights. Which your shop seem to have given everyone. Logged in as a normal user You do NOT see this link.

Jörgen
Joomla 3.9.18
Virtuemart 3.4.x
Olympiantheme Hera (customized)
This reflects current status when viewing old post.

polarstar

Thankyou Jorgen, now i understand based on your succinct reply. Thankyou GJC and everyone else for trying to help. i understand you trying to help many and i think you all doing a great job.

GJC Web Design

When your permissions are fixed the link will be gone .. if u really want to risk having the site live win this condition then you could hide it by css or find the html in the template and comment it out
GJC Web Design
VirtueMart and Joomla Developers - php developers https://www.gjcwebdesign.com
VM4 AusPost Shipping Plugin - e-go Shipping Plugin - VM4 Postcode Shipping Plugin - Radius Shipping Plugin - VM4 NZ Post Shipping Plugin - AusPost Estimator
Samport Payment Plugin - EcomMerchant Payment Plugin - ccBill payment Plugin
VM2 Product Lock Extension - VM2 Preconfig Adresses Extension - TaxCloud USA Taxes Plugin - Virtuemart  Product Review Component
https://extensions.joomla.org/profile/profile/details/67210
Contact for any VirtueMart or Joomla development & customisation

polarstar

Thankyou GJC, now that i know the incorrect permissions are the causal link to this problem, i definitely do not want to have the shop front live until they correct. I did not change any permissions after i loaded VM to create this problem. That is why i thought it was either a setting i did not tick or a coding issue. Spent two days now changing permisssions and reading as much as i can about permissions, but i cannot seem to get it right.

GJC Web Design

You are using an extremely out of date version  -- current version is VM4.0.2

of course this won't work on J2.5 but particularly that version was never considered Joomla's greatest effort  ...

https://dev.virtuemart.net/attachments/download/1117/com_virtuemart.3.2.14.9808.zip is the last J2.5 compatible version .. probably worth at least upgrading to that
GJC Web Design
VirtueMart and Joomla Developers - php developers https://www.gjcwebdesign.com
VM4 AusPost Shipping Plugin - e-go Shipping Plugin - VM4 Postcode Shipping Plugin - Radius Shipping Plugin - VM4 NZ Post Shipping Plugin - AusPost Estimator
Samport Payment Plugin - EcomMerchant Payment Plugin - ccBill payment Plugin
VM2 Product Lock Extension - VM2 Preconfig Adresses Extension - TaxCloud USA Taxes Plugin - Virtuemart  Product Review Component
https://extensions.joomla.org/profile/profile/details/67210
Contact for any VirtueMart or Joomla development & customisation