Help Needed: Errors on checkout success with credit card

[gee807]

Getting the following errors when trying to order with credit card through our store. Any help appreciated!

 

 

Warning: fopen(/usr/lib/libpopt12.a) [function.fopen]: failed to open stream: Permission denied in /home/austmau1/public_html/includes/modules/payment/cc.php on line 202

 

Warning: Cannot modify header information - headers already sent by (output started at /home/austmau1/public_html/includes/modules/payment/cc.php:202) in /home/austmau1/public_html/includes/functions/general.php on line 29

[web-project]

you need to investigate the php code for you standard credit card payment method, as should be noting like this code it:

 

fopen

the above is part of php code which tries to contact with other website to send the data, the standard credit card payment method should only record the cc details to database but not send any data to other website.

 

P.S. It seems to me more common modules come now with some insecure code.

[gee807]

Thank you web-project for your reply :)

 

line 202 that the error refers to is as below...

 

$FH = fopen($FN, 'a');

 

and this is the section its in:

 

if (strlen($infotxt)>250) {

$FH = fopen($FN, 'a');

 

if ($FH) {

fwrite($FH, $infotxt);

fclose($FH);

 

 

Any tips on how to fix it?

 

Thanks again,

Amy

[♥mdtaylorlrim]

libpopt is a linux library that is used for parsing command line parameters. I don't know if it is the same one referenced in your code though. It probably should not even be in osC code, if that is what it is.

 

And what cc.php module are you using? The stock one that comes with osC or from an add-on. Is this a new shop or one that has been running fine for a while? If this started occurring in a working shop I would be suspicious of hacked code.

[web-project]

Thank you web-project for your reply :)

 

line 202 that the error refers to is as below...

 

$FH = fopen($FN, 'a');

 

and this is the section its in:

 

if (strlen($infotxt)>250) {

$FH = fopen($FN, 'a');

 

if ($FH) {

fwrite($FH, $infotxt);

fclose($FH);

 

 

Any tips on how to fix it?

 

Thanks again,

Amy

 

the above code simply use the data and record to file as seems to me, but non of the oscommerce cc modules do sort of stuff, as it should be recorded to database - very suspicious module you are using... you need report / flag this module for oscommerce admins as it come very insecure to use it.