osCommerce banner - how does it update?

[chuckh2d]

I've noticed that the osCommerce banner on my site (on-line since 2004) seems to have changed its appearance AND that the copyright notice updates itself automatically as well.

 

I'm more than happy to advertise osCommerce, but the idea that images are being updated automatically disturbs me greatly. Over the years my site has suffered more than the usual number of header-injection, web-shell and other assaults - including a bizarre and ultimately benign mass-emailing to all my customers with the subject line 'come back!'. I've installed patches and fixes for everything I can, but some things still make no sense.

 

So...is there ANY chance that the ability of the banner and copyright notice to update themselves can be exploited by sinister forces?

 

Apologies if this is a known bug (or ignorant paranoia) --I couldn't figure out how to search narrowly enough.

[♥geoffreywalton]

The year in the copyright notice will update automatically

 

define('FOOTER_TEXT_BODY', 'Copyright © ' . date('Y') . ' <a href="' . tep_href_link(FILENAME_DEFAULT) . '">' . STORE_NAME . '</a><br>Powered by <a href="http://www.oscommerce.com" target="_blank">osCommerce</a>');

 

Have a look at the date your banner image to see if it is more recent than your install date. It is easy to think something has changed when it hasn't really.