[Skip to main content](#vessel-content) # Hikashop Vulnerability ## - **[Uriel](/forum/user/31103-uriel "View Uriel's Profile")** - [![Uriel's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/31103-uriel "View Uriel's Profile") Topic Author - [ Offline](/forum/user/31103-uriel) Less More - Posts: 89 - Thank you received: 2 - 4 years 3 months ago [\#343344](#343344) by [Uriel](/forum/user/31103-uriel "View Uriel's Profile") *[Hikashop Vulnerability](/forum/3-bug-report/904753-hikashop-vulnerability#343344 "-- HikaShop version -- : 4.6.1 -- Joomla version -- : 3.10.9 -- PHP version -- : 7.3.33 -- Browser(s) name and version -- : ALL -- Error-message(debug-mod must be tuned on) -- : Frontend "you do not have access to this page!" Good Day Awesome Hikashop Team! Twice now I have had this message on the Front End of a website I manage with Hikashop Starter. Previously I restored a backup and it started working again. This time I re-installed Hiksahop and the problem went away. I have since found this thread : forum.joomla.org/viewtopic.php?f=715&p=3664633 This person and another experienced the same Is there a Vulnerability in Hikashop?")* was created by *[Uriel](/forum/user/31103-uriel "View Uriel's Profile")* -- HikaShop version -- : 4.6.1 -- Joomla version -- : 3.10.9 -- PHP version -- : 7.3.33 -- Browser(s) name and version -- : ALL -- Error-message(debug-mod must be tuned on) -- : Frontend "you do not have access to this page!" Good Day Awesome Hikashop Team! Twice now I have had this message on the Front End of a website I manage with Hikashop Starter. Previously I restored a backup and it started working again. This time I re-installed Hiksahop and the problem went away. I have since found this thread : [ forum.joomla.org/viewtopic.php?f=715&p=3664633](https://forum.joomla.org/viewtopic.php?f=715&p=3664633) This person and another experienced the same Is there a Vulnerability in Hikashop? Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC85MDQ3NTMtaGlrYXNob3AtdnVsbmVyYWJpbGl0eT90bXBsPW1hcmtkb3du) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png)](/forum/user/63-nicolas "View nicolas's Profile") - [ Offline](/forum/user/63-nicolas) Less More - Posts: 86289 - Thank you received: 14266 - - 4 years 3 months ago [\#343345](#343345) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[Hikashop Vulnerability](/forum/3-bug-report/904753-hikashop-vulnerability#343345 "-- HikaShop version -- : 4.6.1 -- Joomla version -- : 3.10.9 -- PHP version -- : 7.3.33 -- Browser(s) name and version -- : ALL -- Error-message(debug-mod must be tuned on) -- : Frontend "you do not have access to this page!" Good Day Awesome Hikashop Team! Twice now I have had this message on the Front End of a website I manage with Hikashop Starter. Previously I restored a backup and it started working again. This time I re-installed Hiksahop and the problem went away. I have since found this thread : forum.joomla.org/viewtopic.php?f=715&p=3664633 This person and another experienced the same Is there a Vulnerability in Hikashop?")* Hi, That error message is not in HikaShop. What indicates the information you provided and the information on that thread of the Joomla forum is that the file /administrator/components/com_hikashop/helpers/helper.php has been modified by an attacker. But that doesn't necessarily means that the attacker went through HikaShop to attack your website. It could be any other extension out there. Once the attacker has access your website with enough priviledge, it can change anything in there. For example, if the attacker found the password of your super admin account, they can install their own extension which can do anything to the files of your website. Reinstalling HikaShop will remove the modification in the helper.php file but if the attacker still has access to the website via another way, he will be able to add back his modified helper.php file easily. So while reinstalling HikaShop is a short time fix for that error message, it's not a solution. So unfortunately, it's hard to conclude on anything with the information provided so far. What I can say for now is that there are no known vulnerabilities in HikaShop at the moment. I would recommend you install RS Firewall or a similar security extension on your website: [ extensions.joomla.org/extension/rsfirewall/](https://extensions.joomla.org/extension/rsfirewall/) With it, you'll be able to protect your website while at the same time getting information on how the attacker is able to infiltrate your website. There are also security services like [ sucuri.net/website-security-platform/help-now/](https://sucuri.net/website-security-platform/help-now/) They can analyze the situation and sort it out for you. It's more costly but they do everything for you. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC85MDQ3NTMtaGlrYXNob3AtdnVsbmVyYWJpbGl0eT90bXBsPW1hcmtkb3du) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. Board Categories HikaShop- Install & Update- Product & Category Display- Content Creation- Sales and Orders- - Orders management- - Reports & Statistics- Customers- Checkout- Payment Methods- Shipping Methods- Import & Export (CSV, XLS…)- Specific Features- - Affilation- - Taxes- - Wishlist- - Vote- - Carousel & Slider- - Mass Actions- - Filters & Search- - Discount & Coupon- - Feature Request- Integrations- Showcase- General Talk about HikaShop- Development- - HikaShop 3.0 Beta- Translation- Commercial Jobs HikaShop Components- HikaMarket- - Market: Feature requests- - Market: How to?- - Market: Bug Report- HikaSerial- - General talk about HikaSerial- - Serial: Bug Report- - Serial: How to?- - Support en Français de HikaSerial (French Support)- - HikaSubscription- HikaAuction- - Auction: Feature requests- - Auction: How to?- - Auction: Bug report Hikashop around the world- Support en Français (French Support)- Russian- - FAQ. Курс выживания с Hikashop. Частые вопросы и о- - Расширения Hikashop- - Наши сайты на Hikashop- 日本語版サポート(Japanese Support)- Thai- German Archives- Bug Report- How to? [](/forum/topics/feed/mode-topics?format=feed&type=rss) Time to create page: 0.112 seconds [Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org) [](#top)