Goodday, trying to remove a link (new product) in the front end of my shop that opens the full virtuemart administrator console.
running on joomla 2.5. any help would be much appreciated. my first post here.
you have a major permissions problem as I can log into your admin as a visitor!!!!!!!!!!!!
check all your permissions
have removed your image as this is an open hackers invitation
thankyou for your reply. any chance for instructions on where to remove the link to the admin panel? This link was installed on my virtuemart shop front page during installation of software. please
Is this not a simple Joomla menu link ?
this is a link i do not know how to remove. i do not know whether it is a simple joomla link or not. i am trying to find out how to delete it. can anyone help me do this please. i posted a picture of the link in my front shop.
Quote from: GJC Web Design on July 05, 2022, 10:37:33 AM
you have a major permissions problem as I can log into your admin as a visitor!!!!!!!!!!!!
check all your permissions
This suggests your site has been hacked and permissions changed. You should only see a new product link if logged into the front end as an admin/superadmin. Just removing the link won't change the potential issues with user permissions. There was an security issue with some older Joomla versions where a hacker could enter the admin area and change permissions for any user or all users.
So as GJC says,
check all your permissionshttps://docs.joomla.org/Security_Checklist/You_have_been_hacked_or_defaced
this is the link i am trying to delete, any instructions on how would be most appreciated: /index.php?option=com_virtuemart&tmpl=component&view=product&task=edit&virtuemart_product_id=0&manage=1
thankyou for the permissions advice.
We cannot advice youu, if we have no details.
Does this lin display in the menu or in a specific module ?
Perhaps a screenshot or a link to your shop, if the link is public available can help
the link was the standard FE admin link when u are logged in as a super admin except that it is shown to all users and works..
This is why I removed his screen shot as anyone has access to his admin ( as I did)
Of course the link can be removed from the html but he doesn't seem to take seriously that his permissions are completely wrong and anyone can access his admin though I see now the shop has been put on maintenance
This incorrect link appears in my shop front, here is a screenshot. I have asked three times already for help, instructions on exactly how to remove it please. I have received good advice on my permissions problem which i am already aware of and trying to find someone to help set them correctly for me.
but for NOW, if anyone can tell me exactly how to deactivate/ remove this link from the shopfront, it would be most appreciated. /index.php?option=com_virtuemart&tmpl=component&view=product&task=edit&virtuemart_product_id=0&manage=1
I also understand i could be hacked or that many other things are wrong with my setup. But for now if it is possible to remove or deactivate this link on my shopfront page, and someone has instructions on exactly how to do that. it would be most appreciated. This is my second day on this forum and two weeks now trying to get my VM shop going. I am very grateful for this software. and thankyou for removing the picture with my actual site link and thankyou for the link to the instructions on what to do to check if hacked. thankyou.
As GJC already has explained if you would have the time to read his answers.
This link is ONLY active if You have super admin rights. Which your shop seem to have given everyone. Logged in as a normal user You do NOT see this link.
Jörgen
Thankyou Jorgen, now i understand based on your succinct reply. Thankyou GJC and everyone else for trying to help. i understand you trying to help many and i think you all doing a great job.
When your permissions are fixed the link will be gone .. if u really want to risk having the site live win this condition then you could hide it by css or find the html in the template and comment it out
Thankyou GJC, now that i know the incorrect permissions are the causal link to this problem, i definitely do not want to have the shop front live until they correct. I did not change any permissions after i loaded VM to create this problem. That is why i thought it was either a setting i did not tick or a coding issue. Spent two days now changing permisssions and reading as much as i can about permissions, but i cannot seem to get it right.
You are using an extremely out of date version -- current version is VM4.0.2
of course this won't work on J2.5 but particularly that version was never considered Joomla's greatest effort ...
https://dev.virtuemart.net/attachments/download/1117/com_virtuemart.3.2.14.9808.zip is the last J2.5 compatible version .. probably worth at least upgrading to that
I deleted the 100"s of users in my joomla that i had no idea had access, as Jorgen correctly advised. The moment i deleted the last one, that dam link disappeared!!! so relieved. thankyou very very much! i would rather not be running joomla 2.5 and be using the latest version as well as the latest VM and i would rather not be on a an old 2008 server. Perhaps if anyone were to check out our timeline it might become apparent how inconvenient a not for profit like ours is, for some, why we do not get funding.
https://seesworld.org/index.php/en/about-us/our-time-line
thanks GJC, thanks Jorgen, thankyou everyone else!