Uncategorised
Security Issue for HikaShop 2.3.2 and below and for HikaMarket 1.4.2 and 1.4.3
- Details
The security firm sucuri.net audited HikaShop and found a security issue involving the activation of the users after the registration process of HikaShop.
The only cases where it is not a problem is if you deactivated the user registration or the user activation in the options of the Joomla user manager.
Otherwise, you'll have to either update your HikaShop to 2.3.3 or patch your current version.
We extended the expired subscriptions of all our commercial editions of HikaShop to the 10th of October so that anyone can update their HikaShop easily by going in the menu "My account > My subscriptions" on our website, downloading the latest version and then installing it via the Joomla installer on their website.
If, nevertheless, you have customized HikaShop and cannot/don't want to update, you can apply the patch below:
In the file administrator/components/com_hikashop/classes/user.php, replace the line:
$vars = urlencode(base64_encode(serialize(array('passwd'=>$this->registerData->password,'username'=>$this->registerData->username))));
with:
$vars = urlencode(base64_encode(json_encode(array('passwd'=>$this->registerData->password,'username'=>$this->registerData->username))));
And in the file components/com_hikashop/controllers/checkout.php, replace the line:
$infos = unserialize(base64_decode($infos));
with:
$infos = json_decode(base64_decode($infos),true);
Regarding HikaMarket, a similar security issue exists in the versions 1.4.2 and 1.4.3 of the Multivendor edition. We also extended the subscriptions for users who have downloaded HikaMarket multivendor 1.4.2 or 1.4.3.
If you have one of these versions, please update as soon as possible.
HikaMarket Front-end and HikaMarket Multivendor below 1.4.2 are not impacted with the issue
- Details
- Written by: Charlotte
- Category: Uncategorised
- Hits: 7025

SPECIAL OFFER !!!
Thanks to our partnership with Templaza, get 25%-off on all Templaza's templates, using this coupon :
HIKASHOP25
Check out their awesome products on their website : www.templaza.com

- Details
- Written by: Charlotte
- Category: Uncategorised
- Hits: 7372
SPECIAL OFFER !!!
Thanks to our partnership with Joomla-monster, get 20%-off on all Joomla-monster's templates, using this coupon :
JMHIKA20

Check out their awesome products on their website : www.joomla-monster.com
- Details
- Written by: Charlotte
- Category: Uncategorised
- Hits: 1147214

Sorry, we could not find the page you were looking for.
If you access this error page via a link on our website please notify us via our contact form.
- Details
- Written by: Charlotte
- Category: Uncategorised
- Hits: 106590
Hikari Software is a small software company based in Lyon, France. We build e-commerce extensions for Joomla and WordPress, and we have been doing it for over fifteen years.
Our story
Nicolas Claverie
Founder
Hikari Software was founded in 2008 in Lyon, as a subcontractor for a Joomla extension developer. In 2010 we released the first version of HikaShop, with a single idea: an e-commerce solution for Joomla built for simplicity and flexibility.
We never stopped improving it with the same goal. In 2012 we started a partnership with Obsidev, a software company, and launched HikaSerial and HikaMarket to complement HikaShop. HikaAuction followed in 2015, and in 2026 HikaShop started to run on WordPress as well as on Joomla.
Today we are a small team, we are proud of HikaShop, and we are excited to go further.
Our products
HikaShop is a complete e-commerce solution for Joomla and WordPress, to create, personalize and manage an online store, with the marketing tools to analyze results and increase sales.
HikaMarket (since 2012) adds a multi-vendor marketplace to HikaShop and lets vendors manage their shop from the front-end.
HikaSerial (since 2012) adds serial numbers to products, to sell limited editions, vouchers, software licenses or tickets.
HikaAuction (since 2015) adds auctions to HikaShop.
HikaMarket and HikaSerial are developed with our partner Obsidev.
The HikaShop marketplace offers many more extensions: payment and shipping plugins, templates and other add-ons.
Contact
For a question about our products, use the contact page. For support, use the forum.
Brand assets
You are welcome to use our logos to present our products, for example on a page about your own shop, in an article or a review. Please read the rules about using our trademark first, and do not change the colors or proportions of the logos.
HikaShop, the e-commerce solution for Joomla and WordPress. Download: SVG, PNG, SVG for dark backgrounds, PNG for dark backgrounds, symbol only (SVG), symbol only (PNG).
HikaMarket, the multi-vendor add-on. Download: SVG, PNG, SVG for dark backgrounds, PNG for dark backgrounds, symbol only (SVG), symbol only (PNG).
HikaSerial, the serial numbers and licenses add-on. Download: SVG, PNG, SVG for dark backgrounds, PNG for dark backgrounds, symbol only (SVG), symbol only (PNG).
HikaAuction, the auctions add-on. Download: SVG, PNG, SVG for dark backgrounds, PNG for dark backgrounds, symbol only (SVG), symbol only (PNG).