[Skip to main content](#vessel-content) # Security issue ## - **[neo191987](/forum/user/35364-neo191987 "View neo191987's Profile")** - [![neo191987's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar35364.jpg)](/forum/user/35364-neo191987 "View neo191987's Profile") Topic Author - [ Offline](/forum/user/35364-neo191987) Less More - Posts: 431 - Thank you received: 19 - - 8 years 4 weeks ago - 8 years 4 weeks ago [\#298702](#298702) by [neo191987](/forum/user/35364-neo191987 "View neo191987's Profile") *[Security issue](/forum/2-general-talk-about-hikashop/895875-security-issue#298702 "Hi. The subject was another, but I changed it. Is it dangerous (hackers) if there is dbquery in the file show.default.php? I also want to ask how to load something from a plugin I tried but did not...")* was created by *[neo191987](/forum/user/35364-neo191987 "View neo191987's Profile")* Hi. The subject was another, but I changed it. Is it dangerous (hackers) if there is dbquery in the file show.default.php? I also want to ask how to load something from a plugin I tried but did not allow me. Below is the plugin I made, there is a bug on the code I've corrected it but still does not want it. Last edit: 8 years 4 weeks ago by [neo191987](/forum/user/35364-neo191987 "View neo191987's Profile"). Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzItZ2VuZXJhbC10YWxrLWFib3V0LWhpa2FzaG9wLzg5NTg3NS1zZWN1cml0eS1pc3N1ZT90bXBsPW1hcmtkb3du) or [Create an account](/register) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Offline](/forum/user/63-nicolas) Less More - Posts: 86322 - Thank you received: 14281 - - 8 years 4 weeks ago [\#298705](#298705) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[Custom Plugin problem](/forum/2-general-talk-about-hikashop/895875-security-issue#298705 "Hi. The subject was another, but I changed it. Is it dangerous (hackers) if there is dbquery in the file show.default.php? I also want to ask how to load something from a plugin I tried but did not...")* Hi, There is no echo of anything in your code, so it's normal it doesn't display anything. Since you're apparently trying to display something on the product page using the onHikashopBeforeDisplayView trigger, you can look at the code we have in the plugins/hikashop/shippingmanual_prices/shippingmanual_prices.php file since that plugin can be configured to display the shipping fees of the products on the product page. There, you'll also find a onHikashopBeforeDisplayView function and at the end of it, you can see that code: Code: if(!isset($view->element->extraData)) $view->element->extraData = new stdClass(); if(!isset($view->element->extraData->$position)) $view->element->extraData->$position = array(); array_push($view->element->extraData->$position, $data); This code will add the html contained in the $data variable and add it in the position defined in the $position variable. You can look at the XML file next to that PHP file to know the possible values you can have in $position: Code: <option value="topBegin">TOP_BEGIN</option> <option value="topEnd">TOP_END</option> <option value="leftBegin">LEFT_BEGIN</option> <option value="leftEnd">LEFT_END</option> <option value="rightBegin">RIGHT_BEGIN</option> <option value="rightMiddle">RIGHT_MIDDLE</option> <option value="rightEnd">RIGHT_END</option> <option value="bottomBegin">BOTTOM_BEGIN</option> <option value="bottomMiddle">BOTTOM_MIDDLE</option> <option value="bottomEnd">BOTTOM_END</option> The following user(s) said Thank You: [neo191987](/forum/user/35364-neo191987 "View neo191987's Profile") Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzItZ2VuZXJhbC10YWxrLWFib3V0LWhpa2FzaG9wLzg5NTg3NS1zZWN1cml0eS1pc3N1ZT90bXBsPW1hcmtkb3du) or [Create an account](/register) to join the conversation. Board Categories HikaShop Install & Update Product & Category Display Content Creation Sales and Orders Orders management Reports & Statistics Customers Checkout Payment Methods Shipping Methods Import & Export (CSV, XLS…) Specific Features Affilation Taxes Wishlist Vote Carousel & Slider Mass Actions Filters & Search Discount & Coupon Feature Request Integrations Showcase General Talk about HikaShop Development HikaShop 3.0 Beta Translation Commercial Jobs HikaShop Components HikaMarket Market: Feature requests Market: How to? Market: Bug Report HikaSerial General talk about HikaSerial Serial: Bug Report Serial: How to? Support en Français de HikaSerial (French Support) HikaSubscription HikaAuction Auction: Feature requests Auction: How to? Auction: Bug report Hikashop around the world Support en Français (French Support) Russian FAQ. Курс выживания с Hikashop. Частые вопросы и о Расширения Hikashop Наши сайты на Hikashop 日本語版サポート(Japanese Support) Thai German Archives Bug Report How to? [](/forum/topics/feed/mode-topics?format=feed&type=rss) Time to create page: 0.043 seconds [Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org)