Skip to main content

Random files in site root relating to hika shop

More
8 years 6 months ago #290418 by landed
-- HikaShop version -- : HikaShop Essential: 3.4.0
-- Joomla version -- : Joomla! 3.8.6
-- PHP version -- : 5.x
-- Browser(s) name and version -- : chrome
-- Error-message(debug-mod must be tuned on) -- : No error message

Hi
I am finding files in the root of my site that appear to be circumnavigating normal joomla component methods.
example filenames are..
paypaladvanced_cance_1.php

content is
Code:
<?php $_GET['option']='com_hikashop'; $_REQUEST['option']='com_hikashop'; $_GET['tmpl']='component'; $_REQUEST['tmpl']='component'; $_GET['ctrl']='checkout'; $_REQUEST['ctrl']='checkout'; $_GET['task']='notify'; $_REQUEST['task']='notify'; $_GET['notif_payment']='paypaladvanced'; $_REQUEST['notif_payment']='paypaladvanced'; $_GET['format']='html'; $_REQUEST['format']='html'; $_GET['local']='en'; $_REQUEST['local']='en'; $_GET['notif_id']='1'; $_REQUEST['notif_id']='1'; $_GET['from_user']='cancel'; $_REQUEST['from_user']='cancel'; include('index.php');

I am working this for a client and am asking is this placed by hika shop? Was this a previous devs work etc...I would like to delete it to be honest.
This is also to do with paypal. I think it is some kind of paypal call back code perhaps.

Thank you.

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago #290421 by nicolas
Hi,

That's a file placed by the PayPal Advanced plugin of HikaShop.
If you don't use it, you can delete the file.
However, if you use PayPal Advanced, you shouldn't delete that file. Otherwise, some of the functions of that payment method won't work.

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago #290468 by landed
Ok thanks for the info, it seems a bit messy but that's just my opinion. Appreciate the help.

Please Log in or Create an account to join the conversation.

More
8 years 6 months ago #290469 by Jerome
Hello,

Some payment plugin requires a short return URL (not more than 200 char).
Since an HikaShop notification URL can be long via the Joomla non SEF routing system ; plugins will use a file in the ROOT in order to have a very short URL and prefill parameters in the URLS.
There is nothing problematic with the security or else. As you can see, it just set values in PHP variables to initiate the route to the right place.

Regards,

Jerome - Obsidev.com
HikaMarket & HikaSerial developer / HikaShop core dev team.

Please Log in or Create an account to join the conversation.

Time to create page: 0.190 seconds
Powered by Kunena Forum