Hacking attempt loading userinfo, you got logged

Please post your issues and questions about One Page Checkout for Virtuemart 2 to this forum.

Hacking attempt loading userinfo, you got logged

Postby peter@.....com » Tue Apr 29, 2014 2:40 am

Config: Joomla 2.5.19, VM 2.6.0, OPC 2.0.237.260414

I have this error message on checkout: "Hacking attempt loading userinfo, you got logged". Didn't notice it before but it dates back to 31 March 2014 in my VM logs, so before VM 2.6.0.

I found this post:
viewtopic.php?f=5&t=150
and applied the hack in administrator/com_virtuemart/models/user.php

This works but has anything changed in OPC and/or VM that causes this message to show up again?
peter@.....com
 
Posts: 38
Joined: Sat Aug 20, 2011 12:48 pm

Re: Hacking attempt loading userinfo, you got logged

Postby admin » Tue Apr 29, 2014 12:23 pm

Hello Peter, are you getting this on VM2.6.0 and the latest OPC?

Are you trying to make an order as an Admin, or do you get this issue as a normal registered OR anonymous customer?

This error may be shown when:
- a user registrates with virtuemart, but due to an account activation (or other issue) he does not get logged in
- the model to save his order data improperly recognizes this case and throws the error that the user_id for which the data are saved is not equal to the currently (anonymous) user

if you get this issue on the latest opc version (237), let us know and we can investigate this on your server.

best regards,
stan, rupostel.com
admin
Site Admin
 
Posts: 2708
Joined: Wed Jan 06, 2010 11:43 pm

Re: Hacking attempt loading userinfo, you got logged

Postby peter@.....com » Tue Apr 29, 2014 11:58 pm

Hi, I registered as a normal user, so no admin messages.
I am using OPC 237, I will email you a password for my test server so you can investigate.
peter@.....com
 
Posts: 38
Joined: Sat Aug 20, 2011 12:48 pm

Re: Hacking attempt loading userinfo, you got logged

Postby admin » Wed Apr 30, 2014 12:20 pm

hello, i wrote you an email, you can contact us over skype or live chat button. i will be online today until 19 CET time and ready for help.
best regards,
stan
admin
Site Admin
 
Posts: 2708
Joined: Wed Jan 06, 2010 11:43 pm

Re: Hacking attempt loading userinfo, you got logged

Postby blackcomm.1@.....com » Mon Oct 06, 2014 9:42 pm

Hi Stan,

Using VM 2.6.10, Joomla 2.5.27 and OPC 2.0.58.

We have Virtuemart Email Manager Plus. When a customer complete the checkout process registering an account, we obtain this error:

Hacking attempt loading userinfo, you got logged

If i disable VME all work(register and checkout). If i disable OPC, all work (Register, checkout and VME).

Can you tell me how to solve this issue, please?

Thanks!
Attachments
error.png
error.png (66.39 KiB) Viewed 24199 times
-------------------------------
http://www.cuidadicos.es
blackcomm.1@.....com
 
Posts: 38
Joined: Thu Nov 21, 2013 12:31 am

Re: Hacking attempt loading userinfo, you got logged

Postby admin@.....org » Tue Oct 07, 2014 5:23 pm

I also have that problem, and it is costing me sales. Got this message from a customer:

"Tried to place order, but got a message about someone “hacking” during order, so I’m hesitant to provide financial info. Tried to call at xxx-xxx-xxxx to do transaction over phone, but mailbox is full. What to do?

They get confused by what the message is referring to.

What language file is it in so I can change the message to something else? Hackers dont care about being logged anyway.
admin@.....org
 
Posts: 6
Joined: Sun Oct 05, 2014 1:03 pm

Re: Hacking attempt loading userinfo, you got logged

Postby admin » Tue Oct 07, 2014 9:17 pm

hello, are you using virtuemart email manager? if yes, you must comment the line that prints this message. this lines comes when any part of the sytem tries to send user information of an user which is not logged in system. this is common for all email managers.
best regards, stan
admin
Site Admin
 
Posts: 2708
Joined: Wed Jan 06, 2010 11:43 pm

Re: Hacking attempt loading userinfo, you got logged

Postby admin » Wed Oct 08, 2014 9:59 pm

hello, pls let us know if you found a solution with virtuemart email manager support for this.

you can manuallly comment the line here:
\administrator\components\com_virtuemart\models\user.php

look for:
Code: Select all
                  vmError('Hacking attempt loading userinfo, you got logged');
                  echo 'Hacking attempt loading userinfo, you got logged';
                  return false;


and comment it this way:
Code: Select all

                  // vmError('Hacking attempt loading userinfo, you got logged');
                  // echo 'Hacking attempt loading userinfo, you got logged';
                  return false;



within latest OPC i added a special buffer rewrite function to our system plugin which will remove this message from the printed html.

best regards, stan
admin
Site Admin
 
Posts: 2708
Joined: Wed Jan 06, 2010 11:43 pm

Re: Hacking attempt loading userinfo, you got logged

Postby admin@.....org » Fri Oct 10, 2014 11:21 am

I am using it, I will comment that out now. Thank you!
admin@.....org
 
Posts: 6
Joined: Sun Oct 05, 2014 1:03 pm

Re: Hacking attempt loading userinfo, you got logged

Postby admin » Fri Oct 10, 2014 11:03 pm

you are welcome. we also added the buffer rewrite for this exact message so it seaches whole outputted html and replaces this message with "nothing". this will be available within next opc release. this message has nothing to do with hacking attempt and is caused by virtuemart email manager trying to send an email of a user who just registered, but was not logged in due to activation policy.

best regards, stan
admin
Site Admin
 
Posts: 2708
Joined: Wed Jan 06, 2010 11:43 pm

Next

Return to One Page Checkout for Virtuemart 2

cron