News:

AbanteCart v1.4.3 is released.

Main Menu

Do you like AbanteCart? Please rate AbanteCart or share your experience with other eCommerce entrepreneurs. Go to Softaculous rating page to add your rating or write a review

Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - eCommerce Core

#2
This is not a support topic and related to customization.

This topic has been moved to Customization help.

http://forum.abantecart.com/index.php?topic=5045.0
#4
Security / XSS Vulnerability Fix v1.15 to v1.2.7
June 14, 2016, 09:40:57 AM
There is a cross-site scripting vulnerability was discovered in AbanteCart version 1.1.5 to 1.2.7

If you run AbanteCart v1.1.5 to v1.2.7, we suggest that you apply the fix provided below:

To apply the fix is very easy and can be done 2 different ways.

Option 1: replace the file /core/lib/request.php with attached request.php

OR

Option 2: replace the line in the file

In file: /core/lib/request.php

Locate code:
public function decodeURI($uri) {
$params = array();
$open_uri = base64_decode($uri);

    $split_parameters = explode('&', $open_uri);
    for($i = 0; $i < count($split_parameters); $i++) {
        $final_split = explode('=', $split_parameters[$i]);
        $params[$final_split[0]] = $final_split[1];
    }
    return $parms;
}


Replace line:
       return $parms;
With:
   return $this->clean($params);

Fix is complete
#9
Tips and Tricks / MOVED: Product count
May 26, 2014, 10:34:38 PM
#12
Exciting news! We, as AbanteCart development team, consider building Multivendor and Marketplace capabilities into shopping cart 
Please vote and let us know your thought on the topic

Forum Rules Code of conduct
AbanteCart.com 2010 -