For the past several months I've been getting strange "New Customer" emails from the site. Again the site is nonfunctional and you can't even go in there and register an account if you wanted to.
These emails are coming in more and more frequently, several times a day, and everything is just jibberish but it does contain what seems to be a valid email address and phone #. Again I know this can't be possible. Here's a screenshot of one of the emails.
BTW.: The standard OC captcha tool which is supposed to prevent spambots from doing fake account registrations is pretty useless, most modern spambots easily overcome it!
Override Engine * Integrated VQMod * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Rich Snippets * Google Tag Manager * Export/Import Tool * SpamBot Buster * Survey Plus
What exact OC Version do you use?the site is pretty much nonfunctional due to PHP updates on my host
But whatever you reply to this, FIRST, replace the content of your
system/library/encryption.php file with this one, to make PHP v.7.4.x work:
Code: Select all
<?php
final class Encryption {
private $cipher = 'aes-256-ctr';
private $digest = 'sha256';
private $key;
public function __construct($key) {
$this->key = $key;
}
public function encrypt($value) {
$key = openssl_digest($this->key, $this->digest, true);
$iv_length = openssl_cipher_iv_length($this->cipher);
$iv = openssl_random_pseudo_bytes($iv_length);
return base64_encode($iv . openssl_encrypt($value, $this->cipher, $key, OPENSSL_RAW_DATA, $iv));
}
public function decrypt($value) {
$key = openssl_digest($this->key, $this->digest, true);
$iv_length = openssl_cipher_iv_length($this->cipher);
$value = base64_decode($value);
$iv = substr($value, 0, $iv_length);
$value = substr($value, $iv_length);
return openssl_decrypt($value, $this->cipher, $key, OPENSSL_RAW_DATA, $iv);
}
}
?>
I am no longer active at the Forum. Please do NOT send me Personal Mails,
they will no longer be replied to.
My Github OC Site: https://github.com/IP-CAM
3'765 + FREE OC Extensions, on the World's largest Github OC Repository Archive Site.

And to make it even better, check the image, and change all
those 'Routines', by adding that (INT), where it needs to done,
(for what unknown to me reason ever), in the Admin + Frontside
'controller' sections, where EXACTLY that routine exists.

It has something to do with security, I assume, but not beeing
Coder, I really don't know ...

Ernie
PS. A few other PHP v.7.4.x capable encryption.php Files also exist,
possibly matching some OC Versions better, just to have it mentioned too:
viewtopic.php?f=181&t=199924&p=804581#p804581
---
I am no longer active at the Forum. Please do NOT send me Personal Mails,
they will no longer be replied to.
My Github OC Site: https://github.com/IP-CAM
3'765 + FREE OC Extensions, on the World's largest Github OC Repository Archive Site.

Feel free to take a look at the screenshots and demo site, and if you're interested let me know at www.getclearthinking.com/contact if you have any further questions.
Users browsing this forum: No registered users and 44 guests