Broken links on Related Products

[anthony_kudzin]

Hello,

I've recently added some related products to try and upsell things a bit, but although the products are all individually available and functioning within the cart, whenever I clink on a related product, I hit the bounce page.

http://liassis.com/cgi-bin/ss000002....F=14&NOLOGIN=1

The url above looks fairly straightforward, and the PRODREF id is valid. I can only assume there is a problem in ss0000002.pl - but I don't know what that file actually is supposed to do. I tried regenerating the site etc. but to no avail

My site was recently spammed by some malware. I think I got rid of it, but maybe I didn't. The site is 100% ACtinic 'vanilla flavoured', so if I changed Themes and then changed back, do you think that would have any impact and correct the problem ?

Running V8 Business latest version.

[leehack]

Something crazy is happening, either you have completely trashed the site or it has been attacked in some way. When i click a link on your site, it tries to take me to this forum. License a new site and start again and also wipe your server to get rid of any lurking junk. Snapshot regularly to protect yourself better and give a roll back facility. It looks too far gone (time wise to solve) to be corrected, start again IMO.

[jont]

Oh eh... I also get the redirect back to the forum

[leehack]

Must be some pasting of URLs or code gone astray i expect. This site is getting worse by the day, i think a new start is the only way forward now. Something very strange is occurring on it, at least i've never seen it before.

[TraceyHand]

Jont/Lee...you guys should both know better than to click on a cgi-bin link from a forum post

Try it from the originating url http://liassis.com

[leehack]

I didn't Bumpsy, links on the site I am talking about. The whole thing has gone now anyway, looks like it's been laid to rest, RIP.

[anthony_kudzin]

RE: SPAM on Actinic Site & Broken URL's

Hi,

This seems to be getting worse. When you say trashing / restoring the site, I'm not sure of what you are saying. Do I delete everything on the ISP side and reload from my PC ?

How can I be sure that it will stop any attack / repeat without understanding what is going on.

I checked all files again in my acatalog directory at my host site. No strange php files and everything is 644 / 755 or lower.

If I co to my site page http:/liassis.com the site displays. If I then select a link

http://liassis.com/cgi-bin/ss000002....th_vents.html&

I see this in the properties, so that looks good too.

As soon as you click it you see the URL change to

http://community.actinic.com/acatalo...ith_vents.html

something is obviously switching the site ?

How can I trace it ?

It was actually working fine last night. I do have a .tar.gz backup just after I checked it was all looking OK. Perhaps I might try and restore that, but I would like to understand how Actinic deals with pulling the page into the browser, as I think it will just kepp reappearing. I will also scan the PC for malware, but Norton is running on it in resident mode.

[anthony_kudzin]

BTW: I could not get the links to the related products working, but as soon as I removed one of the mini layouts from the side panel display all the links started working fine ? I was wondering if there was a bug in the layout I was using, conflicting with the Theme ?...maybe not give all these SPAM problems.

[cdicken]

Anthony - posting links to cgi scripts on the Community won't work I'm afraid as Actinic will think that http://community.actinic.com/ is the BaseHREF of your store. You need to delete the cart cookie to get your store working again correctly.

In future, post a link to an *.html page and then tell people where to click to see the problem. That's much safer.

[anthony_kudzin]

RE: Security fix

Thanks for the advice, I will try to do so in future.

I have a related post concerning security, that I will briefly mention here before looking in the other notes.

I've just received notification that 8.5.3 was released today and includes a bug fix for security.

Is the fix related to this problem or something else ?

[cdicken]

Is the fix related to this problem or something else ?

Something else. It's all to do with stopping these 'Security Metrics' page validators from flagging up errors in the cart code.