I found out that someone tried to exploit my site by using the Encryption SSL key through Settings/Server .
How did that happen? The SSP encryption key was not a straightforward line, full of letters. Instead, before that line, I saw that message:
</span>ïd=inpu encryption" class="form-control"
This was copy-pasted around 4 times together with some pre-made text.
So is this a security issue?
Correct. However, it can also be caused by an installed extension but is not a bug from the core.GWShop wrote: ↑Mon May 24, 2021 4:17 amI found out that someone tried to exploit my site by using the Encryption SSL key through Settings/Server .
How did that happen? The SSP encryption key was not a straightforward line, full of letters. Instead, before that line, I saw that message:
</span>ïd=inpu encryption" class="form-control"
This was copy-pasted around 4 times together with some pre-made text.
So is this a security issue?
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
How do you know someone tried to exploit your site? Could it not just be your template for the setting page has been corrupted, maybe by an extension?GWShop wrote: ↑Mon May 24, 2021 4:17 amI found out that someone tried to exploit my site by using the Encryption SSL key through Settings/Server .
How did that happen? The SSP encryption key was not a straightforward line, full of letters. Instead, before that line, I saw that message:
</span>ïd=inpu encryption" class="form-control"
This was copy-pasted around 4 times together with some pre-made text.
So is this a security issue?
One of those many reasons why everyone has to post in his first message,
1. which OpenCart version is used
2. which additonal extensions are used
3. any modifications are used/made
4. which template is used
5. which languages are additonally installed/used
What for do you all think is this here: viewtopic.php?f=176&t=200480
Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.
Who is online
Users browsing this forum: No registered users and 29 guests
