[SOLVED] Hacking my own store message in 2.0.8d

[DaggaTora]

Hi,

everytime a user change something in his profile, like the adress, he recieves the following message:"Info: Stop try to hack this store, you got logged".




----------------------------------
Solved by Milbo I The Great

[Milbo]

Please try the attached file, ,remove the .txt and copy it to \administrator\components\com_virtuemart\helpers

[attachment cleanup by admin]

[DaggaTora]

Tried but still remains the hack message.

I've change this file before in the morning when the orders didn't appear: http://forum.virtuemart.net/index.php?topic=105220.15

Thanks Milbo

[Milbo]

hmm this file is in the e version and I tried it as normal user, as administrator and as shopowner. It works always without any message.

[DaggaTora]

The thing is that it also says: Info: Data saved. So, is there a way to just comment that line or hide it someway?

[Milbo]

Did you installed version e?

[DaggaTora]

Nope, yesterday i couldn't find it but i see now its in dev.

I'll install and report!

[DaggaTora]

Updated... same result 

[Milbo]

Do you have multivendor enabled?
Which kind of users is it?

[DaggaTora]

No multivendor,

Is a normal shopper user.

If I do it with a vendor i get the following:

Info: Datos de usuario almacenados
Info: Datos de vendedor guardados
vmError: TableVendors El Nombre Vendedor ya existe.
vmError: VmTableData Sef Alias falta en registro ! No se puede guardar el registro sin Sef Alias.
vmError: store vendor

[Milbo]

There is more broken in your store. Please go into your vmusers table. Ensure that only the shopowner is_vendor and has the vendorId=1

[DaggaTora]

Yes, only me is admin and vendorId=1

[DG]

I can confirm the same error in 2.0.8e also (upgrading from 2.0.7d on Joomla 2.5.6)

[DG]

I can also tell you that after downloading a backup .tar file of the site and unpacking it, that this file was caught by my virus program and deemed "Trojan Horse PHP - BackDoor.CK":

administrator/components/com_virtuemart/classes/payment/paypal_api/certificate/ibinc.php

[DaggaTora]

Mmmm yesterday my hole site was deleted from the server. Hope it has nothing to do with this.