Hi,
Please change the code:
$config =& hikashop_config();
$clean_filename = JPath::clean($file->file_path);
$secure_path = $config->get('uploadsecurefolder');
if((JPATH_ROOT != '') && strpos($clean_filename, JPath::clean(JPATH_ROOT)) !== 0 && strpos($clean_filename, JPath::clean($secure_path)) !== 0)
return false;
to:
$firstChar = substr($file->file_path,0,1);
if(substr($file->file_path, 0, 7) != 'http://' && substr($file->file_path, 0, 8) != 'https://' && !in_array($firstChar, array('#','@'))) {
$config =& hikashop_config();
$clean_filename = JPath::clean($file->file_path);
$secure_path = $config->get('uploadsecurefolder');
if((JPATH_ROOT != '') && strpos($clean_filename, JPath::clean(JPATH_ROOT)) !== 0 && strpos($clean_filename, JPath::clean($secure_path)) !== 0)
return false;
}
in the file administrator/components/com_hikashop/controllers/product.php and see if that helps.