Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

altoid

♥Ambassador
  • Content count

    1,571
  • Joined

  • Last visited

  • Days Won

    13

Posts posted by altoid


  1. Just a note to anyone who may follow this forum.

     

    Last night there was an attempt on my site involving base64 coding that PHPIDS flagged out.

     

    Affected parameters: REQUEST.author_name=%5Bphp%5Deval%28base64_decode%28%

    ....and then the base64 string, not included here.....

    Request URI: /links.php/contact.php

     

    The impact score was 74

     

    This was the first such attempt on this site that I am aware of, so I ran Site Monitor and WinGrep just to be sure. All is OK.


  2. It should show the test result even for 406. Please create a support request with your host in regard to this.

     

    This is a follow up to the 406 issue. I contacted my host support and didn't get much resolved. They said:

     

    Ok Steve, I did check with Tier 2, unfortunately, since this addon isn't our product, we can't be sure what is stopping this certain function from working. If you could check back with the developer and show him that phpinfo page I shared with you earlier, he might have a better idea for what on our server is preventing this certain aspect of the addon from working.

     

    Celextel, I am content to let this go as is and not dwell on the issue anymore. If a 406 is thrown for such attempts, then the intruder can't even make to my site with such parameters in the url. I would say that's a positive thing in it's own right.

     

    I thank you for the great support for this add on.


  3. After installing oscThumb I could not view images on my site. Checking phpThumb/cache I did not see any images being stored in there.

     

    After a lot of googling, reading the forum for solutions, etc. it boiled down to something as simple that I did not have a define in my catalog/includes/configure.php file.

     

    Before----

    define('DIR_FS_CATALOG', '');

    ...osThumb won't work

     

    After

    define('DIR_FS_CATALOG', '/home/myusername/public_html/myshop/');

    ...osThumb now works

     

    Hope that helps someone......


  4. Actually, now that you mention it, I think someone reported this problem in the Header Tags SEO thread and it was spcific to IE. If you know the fix, or the contribution, you are referring to, please let me know since it will save me the work of having to find the solution myself. :)

     

    Jack, I am sure you have a handle on this issue, but I just downloaded Firefox tonight and took a look at that page I reported to you. In Firefox it's fine.

     

    So for Admin>>Links Manager II>>Links

     

    In IE8 the page display is distorted (meaning the content is pushed downward)

    In Firefox/3.6.13 the page displays correctly.

     

    Just feedback is all....thanks


  5. I will check that out. It looks like they still need to update some links on their new site. Some links there take you to the inactive URL.

     

    Thanks

     

    Hello, I downloaded and installed the latest version of PHPIDS 0.6.5. In the testing mode test 1 works as it should, showing the result at the tope but test 2 resulted in "http 406 not acceptable" error and not showing the results at the top.


  6. Hi Steve,

    Thats fine and will not cause any conflict with one another

    Rgds

    Nic

     

    Thanks for confirming Nic. You mentioned automated scripts used for attacks. I think I observed that in my logs a while ago where the script, pretty much rapid fire had tried about every version of myshop.com/admin to gain access. After myshop.com/ there was myadmin, admin1, adminadmin, oscadmin and even /admin/admin. There were something 10 or so tries befor that attempt eventually got trapped when they got the "correct" combination that put your add on in play.


  7. ...... it will prevent automated scripts from attacking it as they are hardcoded mostly for "admin".

     

    Regards

    Nic

     

    Nic, since incorporating the "admin" folder strategy with ip Trap, I have also used/kept the "personal" folder as bait. Both are in place I mean, with appropriate index files incorporated. I want to make sure I am OK with both in place.

     

    Thanks


  8. Actually, now that you mention it, I think someone reported this problem in the Header Tags SEO thread and it was spcific to IE. If you know the fix, or the contribution, you are referring to, please let me know since it will save me the work of having to find the solution myself. :)

     

    Sure, this situation of "page distortion" occurred with the Star Product 1.6 Pimped by Mindsparx add on.

     

    Here's where I posted the issue.

     

    You'll see the response by Janne.

     

    Here's the add on itself.

     

    Note that it was the admin/star_product.php file that Janne had to modify so that it would view correctly with IE.

     

    Thanks for the follow up....


  9. Thanks for listing the problems you found. It all works fine in the 2.3.1 version I have here so I don't know why it would fail on yours but I will take a look at it.

     

    Perhaps it's that I use Internet Explorer?

     

    Regarding the page situation issue, I don't know if this applies or not, but in another add on for 2.3.1 that I downloaded I had something similar occur.

     

    The author of that add on found out that there was a issue with how Internet Explorer was reading the page that would not display the page correctly. He said that other browsers didn't have that issue, it was specific to IE.

     

    Anyway, He tweaked the coding and that fixed the page display in IE. I don't understand coding well enough to pass along exactly what he did though.


  10. A new version has been uploaded with the following changes:

     

     

    Jack, thanks for this, I have been anticipating the 2.3.1 version. I am up and running with Links Manager II in my 2.3.1 shop, but there were several issues I'd like to bring to your attention

     

    1>

     

    I had errors come up loading:

     

    http://www.myshop.com/links_setup.php

     

    I should have copied those to copy here, sorry about that, but there were 2 warnings and one fatal error dealing with line 171 in that file. Something about column_left.php. However looking in the database, the correct tables looked all to be there.

     

    I could delete those tables and try that again to see if the errors come up again if you need specifics.

     

    2>

     

    In the instructions:

     

    3: In catalog/stylesheet.css

     

    ADD anywhere before the last ?>:

     

    3>

     

    I had a problem in admin>Links Manager II with the "Link Catagories" link. I hope I got this correct but to fix that:

     

    9: In catalog/admin/includes/boxes/links.php

     

    array(

    'code' => FILENAME_LINKS_CATEGORIES,

    'title' => BOX_LINKS_LINK_CATEGORIES,

    'link' => tep_href_link(FILENAME_LINKS_CATEGORIES)

    ),

     

    Should have an S removed as follows:

     

    array(

    'code' => FILENAME_LINKS_CATEGORIES,

    'title' => BOX_LINKS_LINK_CATEGORIES,

    'link' => tep_href_link(FILENAME_LINKS_CATEGORIES)

    ),

     

    That got it to work for me.

     

    4>

     

    Lastly, this page: "http://www.myshop.com/admin/links.php" doesn't situate correctly. The link.php info is forced downward until it clears the left column. The other links are positioned correctly though when clicked.

     

    Thanks again.


  11. As a matter of simplification, I just uploaded a full file drop for osc2.3.1. For anyone installing this into an UNMODIFIED OSC2.3.1 store, it is as simple as dropping the files into your catalog folder and following a couple of instructions. This will NOT work in any other OSC version, and is not recommended for modified 2.3.1 stores.

     

    For anyone having a modified 2.3.1 store...I used this "drag and drop" version to install this add on to my somewhat modified shop but I used WinMerge to compare Fulluvscents work to what I already had first.

     

    I have at least several previous add ons that would been effected by a straight drag and drop, the the file comparison utility worked very well for me in this case and the install went fairly easy.

     

    Just posting this as a tip if someone wanted to go that way.


  12. The box should change along with the rest if you change the theme. The colors used are those of the Accordion box on the ThemeRoller site, or you can use the ThemeRoller bookmarklet to restyle on your site.

     

    Here's what a stock store looks like with the Sunny theme:

     

    Regards

    Jim

     

    That's it. Thanks for the verification. I appreciate you providing this add on for 2.3.1, its a nice design touch.


  13. Jim, I have this installed on a "in progress" 2.3.1 shop. I believe it's operating as intended; i.e. the boxes expand accordion style show sub categories. As well, when a category is selected the background color changes as does the category title text color.

     

    All's good I think; I only have two levels (catetory>subcategory) at this point for a couple main categories, but the third category just goes to products, still that looks fine.

     

    I have the "sunny" themeroller installed so the category boxes background title area picked up the "orange" color. However the balance of the boxes title background in the shop are gray. Perhaps that's how it's supposed to work by design, so I am only mentioning that here for an observation.

     

    I am still in the newbie stage, but I presume if I choose another themeroller theme, the category accordion boxes will change along with the rest of the stores theme.

     

    Anyway, so far so good, as I add some more categories and products I will keep an eye on that.

     

    Thanks


  14. I was looking for the PHP IDS website at "http://php-ids.org/"

     

    Got this message auf Deutsch:

     

    Dieser Server ist nicht mehr in Betrieb.

    Bitte teilen Sie dem Betreiber mit, dass er seinen DNS auf die neue IP 46.4.40.248 umstellt.

     

    schokokeks.org

     

    A little googling came up with the revised site it seems.

     

    "http://phpids.org/" I hope that's a valid site.


  15. one of these 2....

     

    1. in the language file for the product reviews pages you add in a define for HEADING_TITLE . (Will then only give 1 title but looks way better)

     

     

    I came up with another page that shows "HEADING_TITLE" for the meta page title. It showed up when I did a test search in my 2.3.1 shop landing on the advanced_search_result.php page.

     

    In this case it made more sense to add a define so I did that as follows:

     

    define('HEADING_TITLE', 'Search Results');

     

    That's in /calalog/includes/languages/english/advanced_search.php

     

    That cleaned things up. Thanks again for the tip.


  16. Thanks for explaining, i know what it is... I have uploaded a new version and please let me know it that one works ok for your store.

     

    The problem was some left over codes from version 2.2 that only shows up in explorer, i hardly use explorer so i missed it, but as a developer i should... shame on me :blink:

     

    /Janne

     

    Janne, I have replaced my tweaked version of that file with yours. All works very well.

     

    Thank you.

     

    I am also going to use your 2.2 version of this add on for a couple 2.2 stores I run.

    Thank you for your work.


  17. To rephrase, the catalog side is fine...but on the admin side the page is there, but it "bleeds" over onto the left column where the menus are. The page is functional, I can select the product and activate it, etc. It's just the distortion of the page that is present.

     

    A follow up here on this and my disclaimer is that I am far from being an experienced coder. But it looks like I did get this sorted this out and got it working correctly for me.

     

    In looking closer at admin/star_product.php and comparing with the review.php and specials.php coding under admin>>catalog it looked like there was coding in the star_product.php that was causing my situation. I looks like code intended for perhaps 2.2.

     

    Anyway, I removed the require header, column left, footer and body code, and put in require template_top.php and template_bottom.php coding as per those other pages I referred to. That fixed things up.


  18. Im not sure if you have installed the 2.2 version or the oscommerce 2.3 version that i released yesterday,

     

    Anyway, can you post the source code for that page so i can see. I have my contribution mindsparx admin installed but it should work with the standard admin... is there any one else with standard admin that have this problem?

     

    /janne

     

    My apologies, I am using the 2.3.1 version you just posted.

     

    I hope I was clear on describing the problem on teh admin page. To rephrase, the catalog side is fine...but on the admin side the page is there, but it "bleeds" over onto the left column where the menus are. The page is functional, I can select the product and activate it, etc. It's just the distortion of the page that is present.

     

    The install is pretty simple, especially on the admin side and I went over that a couple times to see if I made any errors (which is possible), but I just don't see a mistake in my install at this point.

     

    It just came to me, that while I think the sql processed properly when I ran that through PHPMyAdmin, I should look at the database to verify that all got set up. I will do that tonight, I am currently at my "day job" and can't get to it right now.

     

    If you'd like I could post a screenshot here so you can see what I am seeing.

     

    Thanks for responding.


  19. Changed things a bit from above.....and again, for a 2.3.1 shop

     

    I tweaked this a bit so the meta tags now shows:

     

    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <title>Reviews for Actual Product Name</title>
    <meta name="description" content="Product description up to 200 characters" />
    <meta name="keywords" content="Reviews for Actual Product Name, Product Model" />
    

     

    which removed the double colons, ::, replaced with the word "for" and added the products model number to the key words.

     

    So in includes/easy_meta_tags.php after

     

    $meta_keywords_tag = NAVBAR_TITLE . ' ' . $reviews_meta['products_name'];

     

    I now have

     

     }
    // product reviews metas 2
    elseif  (basename($PHP_SELF) == FILENAME_PRODUCT_REVIEWS) {
    $product_reviews_meta_query = tep_db_query("select p.products_id, p.products_model, p.products_image, p.products_price, p.products_tax_class_id, pd.products_name, pd.products_description from " . TABLE_PRODUCTS . " p, " . TABLE_PRODUCTS_DESCRIPTION . " pd where p.products_id = '" . (int)$HTTP_GET_VARS['products_id'] . "' and p.products_status = '1' and p.products_id = pd.products_id and pd.language_id = '" . (int)$languages_id . "'");
    $product_reviews_meta = tep_db_fetch_array($product_reviews_meta_query);
    $meta_title_tag = NAVBAR_TITLE . ' for ' . $product_reviews_meta['products_name']; 
    $meta_description = preg_replace('/<[^>]*>/', '', $product_reviews_meta['products_description']);
    $meta_description = preg_replace('/\s\s+/', ' ',$meta_description);
    if (strlen($meta_description) > 200){
    $meta_description_tag = substr($meta_description, 0, 200) . '...';
    }else {
    $meta_description_tag = $meta_description;
    }
    $meta_keywords_tag = NAVBAR_TITLE . ' for ' . $product_reviews_meta['products_name'] . ', ' . $product_reviews_meta['products_model'];

     

    There may be a better way to do this but other than fixing that issue up a little, this helped me grasp a little better what's going on with the coding.


  20. I am going to give number 2 a shot.

     

    Here's what I came up with, with the disclaimer that this is the first time I tackled anything like this; so someone who really knows what they are doing should look this over and critique/fix up as needed.

    For 2.3.1 to get product reviews meta tags to generate something useable for meta tags in includes/easy_meta_tags.php right after

     

    $meta_keywords_tag = NAVBAR_TITLE . ' ' . $reviews_meta['products_name'];

     

    I added:

     

     }
    // product reviews info metas part 2
    elseif  (basename($PHP_SELF) == FILENAME_PRODUCT_REVIEWS) {
    $product_reviews_meta_query = tep_db_query("select p.products_id, p.products_model, p.products_image, p.products_price, p.products_tax_class_id, pd.products_name, pd.products_description from " . TABLE_PRODUCTS . " p, " . TABLE_PRODUCTS_DESCRIPTION . " pd where p.products_id = '" . (int)$HTTP_GET_VARS['products_id'] . "' and p.products_status = '1' and p.products_id = pd.products_id and pd.language_id = '" . (int)$languages_id . "'");
    $product_reviews_meta = tep_db_fetch_array($product_reviews_meta_query);
    $meta_title_tag = NAVBAR_TITLE . ' :: ' . $product_reviews_meta['products_name']; 
    $meta_description = preg_replace('/<[^>]*>/', '', $product_reviews_meta['products_description']);
    $meta_description = preg_replace('/\s\s+/', ' ',$meta_description);
    if (strlen($meta_description) > 200){
    $meta_description_tag = substr($meta_description, 0, 200) . '...';
    }else {
    $meta_description_tag = $meta_description;
    }
    $meta_keywords_tag = NAVBAR_TITLE . ' ' . $product_reviews_meta['products_name'];

     

    So now my meta tag looks something like this when viewing the source:

     

    <title>Reviews :: Actual Product Name</title>
    <meta name="description" content=" Product description up to 200 characters." />
    <meta name="keywords" content="Reviews Actual Product Name" />
    

     

    Obviously Actual Product Name is the full text of the product name and the description comes from pd.products_description.

     

    There's some other stuff there in the $product_reviews_meta_query that probably doesn't need to be there but I copied that query from product_reviews.php to give me something to work from.

     

    This works for me on my "in progress" 2.3.1 site that was not generating the correct meta tags for product_reviews.php for various products I have listed. I only tackled this because it's time for me to better understand coding and this was a way to do that.

     

    Again...disclaimer. Someone who knows this stuff better should chime in here if this isn't correct.

×