VirtueMart Forum

VirtueMart 1.1.x [ Old version - no longer supported ] => Payment VM 1.1 => PayPal / PayPal Pro VM 1.1 => Topic started by: CraigMartin on July 31, 2011, 01:25:20 AM

Title: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: CraigMartin on July 31, 2011, 01:25:20 AM
When in the Virtuemart back-end administration, I get the following error message:

500 - An error has occurred.

Internal Server Error - SQL Injection detected!

The error only happens when saving changes to the PayPal payment method.
Any ideas?

Using:
Joomla Version 1.5.22
Virtuemart 1.1.9
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: JoomJohnny5 on August 12, 2011, 05:40:06 AM
Hi Craig - Any luck with this?  I am now having the same problem out of nowhere.  Quite strange.  Ill keep messing around and keep you updated.  Thanks.
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: JoomJohnny5 on August 16, 2011, 04:48:38 AM
See this post for a potential workaround and a little more info:

http://forum.virtuemart.net/index.php?topic=89863.0
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: Cracksnap on August 18, 2011, 13:29:15 PM
Same problem here  :(
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: shakensoul on August 18, 2011, 19:16:46 PM
I am also getting the same error when trying to add Paypal Legacy>Configuration>Payment Extra Info code.


500 - An error has occurred.
Internal Server Error - SQL Injection detected!


The code I am trying to insert is the as per this post http://forum.virtuemart.net/index.php?topic=39584.0

The default code is also not working. Can this code be manually added to any of the config file?

I am using VM 1.1.8 stable and Joomla 1.5.23

Any help would be appreciated.





Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: stinga on August 19, 2011, 11:11:19 AM
G'day,

I don't think this is a J!VM issue, but it might be, I would have thought it is your hosting provider, but I am sure someone knowledgeable will be along shortly.
That error is very web servery I.E, the 500, if it was J!VM it would hopefully be a nice error message.

Who hosts your site?
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: shakensoul on August 19, 2011, 20:22:06 PM
Host is hostdime.in

I am no web developer, but a newbie.  :'(

I checked the usual error logs but could not find anything unusual.

Can this code be manually added to any of the config file?
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: shakensoul on August 21, 2011, 16:38:44 PM
Updated to Virtuemart 1.1.9, but still problem persists  :'(
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: stinga on August 21, 2011, 19:20:00 PM
G'day,

Since you have upgraded this probably points to it being your web host. Have you asked them if they do any checking?
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: shakensoul on August 23, 2011, 21:01:37 PM
Quote from: stinga on August 21, 2011, 19:20:00 PM
G'day,

Since you have upgraded this probably points to it being your web host. Have you asked them if they do any checking?

I am not exactly sure what to tell my host, which files I should ask them to look....
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: Stonedfury on August 23, 2011, 22:04:19 PM
Do you have site security installed? Something like easycalcPlus? I have found that most security applications that protect against SQL Injections don't like admin making changes.
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: shakensoul on August 24, 2011, 21:22:47 PM
Quote from: Stonedfury on August 23, 2011, 22:04:19 PM
Do you have site security installed? Something like easycalcPlus? I have found that most security applications that protect against SQL Injections don't like admin making changes.

You hit the nail on the head! Thanks a ton. You are a sweetheart  ;D

Everything is working great now.
Title: Re: Can't save PayPal payment method. Internal Server Error - SQL Injection detected
Post by: JoomJohnny5 on August 26, 2011, 08:53:50 AM
That's exactly what it was for me too - I simply disabled easycalcPlus and then the changes submit fine, then re-enabled the plugin

The manual workaround 1) editing the database values for the table "jos_vm_payment_method" and 2) editing the file /administrator/components/com_virtuemart/classes/payment/ps_paypal.cfg.php should also do it

Thanks y'all