RuposTel Support Forum

Config: Joomla 2.5.19, VM 2.6.0, OPC 2.0.237.260414

I have this error message on checkout: "Hacking attempt loading userinfo, you got logged". Didn't notice it before but it dates back to 31 March 2014 in my VM logs, so before VM 2.6.0.

I found this post:
viewtopic.php?f=5&t=150
and applied the hack in administrator/com_virtuemart/models/user.php

This works but has anything changed in OPC and/or VM that causes this message to show up again?

Hello Peter, are you getting this on VM2.6.0 and the latest OPC?

Are you trying to make an order as an Admin, or do you get this issue as a normal registered OR anonymous customer?

This error may be shown when:
- a user registrates with virtuemart, but due to an account activation (or other issue) he does not get logged in
- the model to save his order data improperly recognizes this case and throws the error that the user_id for which the data are saved is not equal to the currently (anonymous) user

if you get this issue on the latest opc version (237), let us know and we can investigate this on your server.

best regards,
stan, rupostel.com

Hi, I registered as a normal user, so no admin messages.
I am using OPC 237, I will email you a password for my test server so you can investigate.

hello, i wrote you an email, you can contact us over skype or live chat button. i will be online today until 19 CET time and ready for help.
best regards,
stan

Hi Stan,

Using VM 2.6.10, Joomla 2.5.27 and OPC 2.0.58.

We have Virtuemart Email Manager Plus. When a customer complete the checkout process registering an account, we obtain this error:

Hacking attempt loading userinfo, you got logged

If i disable VME all work(register and checkout). If i disable OPC, all work (Register, checkout and VME).

Can you tell me how to solve this issue, please?

Thanks!

I also have that problem, and it is costing me sales. Got this message from a customer:

"Tried to place order, but got a message about someone “hacking” during order, so I’m hesitant to provide financial info. Tried to call at xxx-xxx-xxxx to do transaction over phone, but mailbox is full. What to do?

They get confused by what the message is referring to.

What language file is it in so I can change the message to something else? Hackers dont care about being logged anyway.

hello, are you using virtuemart email manager? if yes, you must comment the line that prints this message. this lines comes when any part of the sytem tries to send user information of an user which is not logged in system. this is common for all email managers.
best regards, stan

hello, pls let us know if you found a solution with virtuemart email manager support for this.

you can manuallly comment the line here:
\administrator\components\com_virtuemart\models\user.php

look for:

Code: Select all

                  vmError('Hacking attempt loading userinfo, you got logged');
                  echo 'Hacking attempt loading userinfo, you got logged';
                  return false;



and comment it this way:

Code: Select all


                  // vmError('Hacking attempt loading userinfo, you got logged');
                  // echo 'Hacking attempt loading userinfo, you got logged';
                  return false;


within latest OPC i added a special buffer rewrite function to our system plugin which will remove this message from the printed html.

best regards, stan

I am using it, I will comment that out now. Thank you!

you are welcome. we also added the buffer rewrite for this exact message so it seaches whole outputted html and replaces this message with "nothing". this will be available within next opc release. this message has nothing to do with hacking attempt and is caused by virtuemart email manager trying to send an email of a user who just registered, but was not logged in due to activation policy.

best regards, stan