mitch101 Posted May 1, 2008 Posted May 1, 2008 I bought a domain from avagoo.com. When I go into the OS commmerce admin control panel to edit and update, I am able to do so without entering a username or password. Concerned, I tested this out on another members site admin area (http://www.bookfare.avagoo.com/admin) and was able to edit and update anything. WTF?
Guest Posted May 1, 2008 Posted May 1, 2008 I bought a domain from avagoo.com. When I go into the OS commmerce admin control panel to edit and update, I am able to do so without entering a username or password. Concerned, I tested this out on another members site admin area (http://www.bookfare.avagoo.com/admin) and was able to edit and update anything. WTF? So you have an older version of osc. Now you have told the world that your admin is not secure. WTF?
mitch101 Posted May 1, 2008 Author Posted May 1, 2008 http://www.bookfare.avagoo.com/admin This is not my URL. Looks like it is an older version, the info on the page is: E-Commerce Engine Copyright © 2003 osCommerce osCommerce provides no warranty and is redistributable under the GNU General Public License Powered by osCommerce
Guest Posted May 1, 2008 Posted May 1, 2008 looks like the verison is define('PROJECT_VERSION', 'osCommerce 2.2-MS2'); per the application top file. check out the following: http://www.oscommerce.com/forums/lofiversion/i...php?t41725.html
Guest Posted May 1, 2008 Posted May 1, 2008 also try http://addons.oscommerce.com/info/2701 http://www.bookfare.avagoo.com/admin This is not my URL. Looks like it is an older version, the info on the page is: E-Commerce Engine Copyright © 2003 osCommerce osCommerce provides no warranty and is redistributable under the GNU General Public License Powered by osCommerce
Recommended Posts
Archived
This topic is now archived and is closed to further replies.