Please look at my configuration page

[salon428]

My site was defaced today. I have been all night fixing and cannot seem to get this last part. Here is my configuration page\

<?php

/*

$Id: configure.php,v 1.14 2003/07/09 01:15:48 hpdl Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://theperfectcircle.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://theperfectcircle.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', false); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN','theperfectcircle.com ');

define('HTTPS_COOKIE_DOMAIN', 'theperfectcircle.com ');

define('HTTP_COOKIE_PATH', 'catalog ');

define('HTTPS_COOKIE_PATH', 'catalog ');

define('DIR_WS_HTTP_CATALOG', 'catalog ');

define('DIR_WS_HTTPS_CATALOG', 'catalog ');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', 'me');

define('DB_SERVER_PASSWORD', '******');

define('DB_DATABASE','osc1');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

?>

 

 

[color=red]You may also be able to tell whats wrong from the page its self

[/color]theperfectcircle

[boxtel]

My site was defaced today. I have been all night fixing and cannot seem to get this last part. Here is my configuration page\

<?php

/*

  $Id: configure.php,v 1.14 2003/07/09 01:15:48 hpdl Exp $

 

  osCommerce, Open Source E-Commerce Solutions

  http://www.oscommerce.com

 

  Copyright ? 2003 osCommerce

 

  Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

  define('HTTP_SERVER', 'http://theperfectcircle.com'); // eg, http://localhost - should not be empty for productive servers

  define('HTTPS_SERVER', 'https://theperfectcircle.com'); // eg, https://localhost - should not be empty for productive servers

  define('ENABLE_SSL', false); // secure webserver for checkout procedure?

  define('HTTP_COOKIE_DOMAIN','theperfectcircle.com ');

  define('HTTPS_COOKIE_DOMAIN', 'theperfectcircle.com ');

  define('HTTP_COOKIE_PATH', 'catalog ');

  define('HTTPS_COOKIE_PATH', 'catalog ');

  define('DIR_WS_HTTP_CATALOG', 'catalog ');

  define('DIR_WS_HTTPS_CATALOG', 'catalog ');

  define('DIR_WS_IMAGES', 'images/');

  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

  define('DIR_WS_INCLUDES', 'includes/');

  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

  define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

  define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));

  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

  define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

  define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers

  define('DB_SERVER_USERNAME', 'me');

  define('DB_SERVER_PASSWORD', '******');

  define('DB_DATABASE','osc1');

  define('USE_PCONNECT', 'false'); // use persistent connections?

  define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

?>

[color=red]You may also be able to tell whats wrong from the page its self

[/color]theperfectcircle

[right][post=510293]<{POST_SNAPBACK}>[/post][/right]

 

 

well, if you tell us what the problem is, that would narrow it down a lot.

 

in the meantime, remove the spaces from

 

define('HTTP_COOKIE_PATH', 'catalog ');

define('HTTPS_COOKIE_PATH', 'catalog ');

define('DIR_WS_HTTP_CATALOG', 'catalog ');

define('DIR_WS_HTTPS_CATALOG', 'catalog ');

 

and I don't know what the meaning of this is:

 

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));

[salon428]

well, if you tell us what the problem is, that would narrow it down a lot.

 

in the meantime, remove the spaces from

 

define('HTTP_COOKIE_PATH', 'catalog ');

define('HTTPS_COOKIE_PATH', 'catalog ');

define('DIR_WS_HTTP_CATALOG', 'catalog ');

define('DIR_WS_HTTPS_CATALOG', 'catalog ');

 

and I don't know what the meaning of this is:

 

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));

<{POST_SNAPBACK}>

 

 

Thanks for everyone's help especially Mibble . The spaces as well as not having forward slashes '/catalog/' was causing the welcome page to display without images (cart or product) and for links generated within os commerce not to work.

this little typo was driving me up a #$@#ing wall. Thanks again and Happy Holidays B)

[♥Vger]

If your site was defaced then it may well happen again. It will depend upon which version of php your server is running on. Go to your 'admin' control panel, click on Tools and then on Server Info. This will show you the version of php installed.

 

If your version of php is 4.3.9 or below then your site is vulnerable to the new php worm. You must have either 4.3.10 or php5 installed (see these forums for php5 fix for osCommerce).

 

Vger