Hack Attempt

[pjssms]

Hello,

I have created one shop and now my user is saying that he is getting a hacking attempt page when trying to see a product.

When he tries to see the same page from firefox it works but not in internet explorer.

I tried to clean cookies from internet explorer but i still got the errors.

How can i fix this ?

[rocky]

You can get more information about the "Hack attempt" by editing classes/Tools.php and uncommenting line 383 in the displayError function. Change it from:

//        if ($string == 'Hack attempt') d(debug_backtrace());

to:

if ($string == 'Hack attempt') d(debug_backtrace());

This will display a trace of the function calls that led to the hack attempt, which should make it easier to figure out what is going wrong.

[pjssms]

Thank you.

I will try that.

[emirie]

@Rocky, I tried to do this on my site since I'm getting hack attempt error when I tried to changed bankwire module to postal account module. After confirming the order I got : Hack attempt (OrderHistory -> id_order_state is empty).

I tried to modify the code using the above steps then , I bought items from the shop again and confirm the order after that the other sidebox was missing and I got this code showing on postalaccount/validation.php page

Can you please give me a hint on how to solve this problem....
Thanks.


I can't post the error code and can't upload attachment.

Here is the screenshot link: http://www.emhzcollections.com/Store.jpg

[rocky]

It seems id_order_state is missing. It is hard to help without actually looking at the module code. Make sure that you are including an appropriate order state ID when creating the order.

[emirie]

Sorry for my ignorance but where can I set this id_order_state ?
BTW I used the bankwire module ... I renamed all folders, files and files content to postalaccount. Now I don't have bankwire module on the payment section.

Thank you for the reply.

[rocky]

I don't have access to your module, so I'll use the bankwire module as an example. In that module, on line 20 of modules/bankwire/validation.php (in PrestaShop v1.3.1) is the following line:

$bankwire->validateOrder($cart->id, _PS_OS_BANKWIRE_, $total, $bankwire->displayName, NULL, $mailVars, $currency->id);

It is the second parameter _PS_OS_BANKWIRE_ that is the order state. In the bankwire module, _PS_OS_BANKWIRE_ is used, which is defined on line 75 of config/defines.inc.php as 10. If you go to the Orders > Statuses tab in the Back Office, you will see that order state 10 is the "Awaiting bankwire payment" status.

If you are using this module alongside the bankwire module, it needs to create a new order state and you need to change the second parameter to the ID of that order state.

[emirie]

Rocky Thank you for sharing your knowledge with us, I really appreciate your help.
The new module is working now... I just change the PS_OS_BANKWIRE to PS_OS_postalaccount of config/defines.inc.php.

I only need some tweaking of emails showing bankwire messages.

My case is SOLVED.