News: Admin Security Flaw Announced

Article Date(s):06/28/2009 - 12/31/2035
The Zen Cart Development Team announced that a security flaw has been found in all versions of zen cart. They have released a fix for this. I am pasting their announcement below. If you need assistance in getting this security patch installed, please visit the Zen Cart Troubleshooting tab for more information. http://zencart-ecommerce-website-design.com/index.php?main_page=product_info&cPath=18&products_id=132 ----------- email from Zen Cart Dev Team ------------------- Zen Cart Security Vulnerability Alert + Patch Please pardon this mass email. If you are running a Zen Cart store, it's important that you read this message and take action immediately. A vulnerability has been discovered in the admin section of v1.3.8 (and previous versions). To take advantage of this vulnerability any attacker must know the URL of your admin section. As our security recommendations point out, you should change the folder that your admin resides in as soon as you installed Zen Cart. SO -- THE FIRST STEP YOU **NEED** TO TAKE is to rename your /admin/ folder! http://tutorials.zen-cart.com/index.php?article=33 However we realise that relying on this 'Security through Obscurity' is not foolproof, hence the release of a patch, which can be downloaded from the Zen Cart Support forum, here: http://www.zen-cart.com/forum/showthread.php?t=130161 The zip file there contains a readme.html with full details on how to install the security patch files. The security patch uses Zen Cart's override system to make installation as simple as possible. The security patch will work for previous versions in the 1.3.x series. Older releases i.e v1.2.x are no longer supported and the patch has not been fully tested on those versions, however some parts of the patch should still work with v1.2.x (again see the readme.html file). However we strongly advise anyone using the 1.2.x versions to upgrade to 1.3.8 as soon as possible. The Zen Cart Team takes security matters very seriously. But security is only as good as those who follow posted recommendations. Please apply the appropriate patches and security measures promptly, for your own benefit. SUMMARY: Your Action Steps are: 1. RENAME YOUR ADMIN FOLDER !!!!! Yes, if you haven't already renamed your /admin/ folder, do it NOW! Instructions can be found here: http://tutorials.zen-cart.com/index.php?article=33 2. APPLY THE SECURITY PATCH !!! http://www.zen-cart.com/forum/showthread.php?t=130161 3. Subscribe yourself to the Zen Cart Announcements mailing list: http://www.zen-cart.com/forum/subscription.php?do=addsubscription&f=2 4. Keep your site's Zen Cart software up-to-date at all times. Numerous bugs, improvements, and security fixes are included in every new release. It is in your best interests to remain current. http://www.zen-cart.com/forum/forumdisplay.php?f=2 Sincerely, The Zen Cart Team
Back

Shopping Cart

Your cart is empty.

Customer Reviews

The best thing that happened to our website, was Judy!!!

Judy.... words can not begin to let you know how blessed we were to find YOU!!! The ease and professionalism in which you handled our needs was just...
Read More ->


Judy is the best !

Judy is the most amazing person to work with. I also found Judy from Google and after talking to her she put my mind at rest as she knew exactly what...
Read More ->


I could never thank you enough!

Judy has provided me incredible service to provide my customers an awesome shopping experience! My store has had many changes and additions which...
Read More ->


Better than I could ever hope for

Wish I had known of Judy long ago. Too many bad memories of expensive, non responsive IT help before. Found Judy looking for info on how to update my...
Read More ->


Judy the Savior of our business

Judy, Words can not express the gratitude,we at werbeautiful.com feel. Our website was down due to hackers, we were making no money. We called...
Read More ->


Who's Online

There currently are 8 guests online.
Copyright © 2004 - 2019 ZenCart Ecommerce Website Design
Zen Cart Templates Zen Cart Guru
Powered by Zen Cart