Default CC appears when turned off

[Spectra]

Looking at the tables:

customers has a few thousand records, customers_payment_allowed appears to be blank for them all

customer_groups has 2 records, retail and wholesale, for both, group_payment allowed is blank


payment.php looks the same as the one I have as a backup copy, its 249 lines long with nothing glaring as having been hacked or changed, however, without knowing all the ins and outs of the functions etc, this may not be the case.

Thanks

[Spectra]

for template switching, I have all those folders, plus OSO3C00216 which is the folder for the template we purchased

if you want to pm me, I can give you ftp access if you want, I would love to get this resolved, plus I am worried that the site has been hacked or similar.

Thanks

[wkdwich]

Your site has been hacked.. sorry but I belive it is true.. I had the same thing happen to a client's site and we completely upgraded.. it wasn't worth the time or efort to figure out what happened.. All this client ook was PayPal then all of a sudden there was a credit card form.. if you look at the bottom of the credit card form is there a line that says something like:
if you want to choose another payment" and a check box?? If so you have been hacked..

[Spectra]

yep, the site had been hacked, thanks to PGMarshall for all his help on this one, the site is back up and running, but we will upgrading ASAP to a newer version

They had hacked the file checkout_payment.tpl.php in templates/fallback/content so this has been changed, filemanager has been removed, the admin dir renamed etc, so hopefully it is now stable till we can get the newer version sorted out.

[wkdwich]

Personally I am not 100% sure the filemanager was the cultprit here.. my client did not have filemanager for a long time.. since the vulnerability was announced..

[Spectra]

You may well be correct, but I have just had a happy time chmod-ing the directories and files so hopefully that will help too!

I will be updating to the latest version as soon as I can.

[Spectra]

As PGMarshall suggested, Ive installed sitemonitor, but when I go to admin, I get the following error:

No Right Permission Access

any clues? I followed the instructions, but I guess I need to enable something else!

[michael_s]

As PGMarshall suggested, Ive installed sitemonitor, but when I go to admin, I get the following error:

No Right Permission Access

any clues? I followed the instructions, but I guess I need to enable something else!

Check the wiki on installing new mods to the admin:
http://wiki.oscdox.com/files_access

Next, depending on the old version of osCmax you were running, the vulnerability could be one of many. Be sure you patch the application_top.php with this fix, or you will get hacked again, even if no filemanager is present:
r169 - oscmax2 - Project Hosting on Google Code

[Spectra]

its V2.0 will that application_top.php still work with this?

[Spectra]

and how do I download the application_top.php? do I copy and paste it from the page as there isnt an obvious download button :-s thanks