-
You MUST read the Babiato Rules before making your first post otherwise you may get permanent warning points or a permanent Ban.
Our resources on Babiato Forum are CLEAN and SAFE. So you can use them for development and testing purposes. If your are on Windows and have an antivirus that alerts you about a possible infection: Know it's a false positive because all scripts are double checked by our experts. We advise you to add Babiato to trusted sites/sources or disable your antivirus momentarily while downloading a resource. "Enjoy your presence on Babiato"
Active eCommerce CMS By ActiveITzone V8.7
- Thread starter Tuton
- Start date
@NullMaster
Please could you help solve the automatic erasure of the mysql in v4.0.
Thanks in advance
@nulled123, @phpcore @TassieNZguys any idea how to get .svg extension activate on the file uploader on Ver.4.0 /
when uploading the below error comes ,
also on my server the mysql was automatically deleted .. may they have a back door if someone can help with that would save us all , because i was doing modifications, but suddenly database was gone and http 500 error comes ,,
thanks in advance ,
Please could you help solve the automatic erasure of the mysql in v4.0.
Thanks in advance
Last edited:
I can help you come in telegram @krapteamlive
is free xd
i have in my shop , i love emart
I believe the backdoor that drops the entire database is in the /vendor/laracon21/timezones/src/routes/web.php
All of laracon21 packages are backdoors. Nothing usefull there.
Found backdoors in mehedi-iitdu/core-component-repository too.
This ZIP file contains all modifications I made in those files. It may work, I'm not sure yet. But if you want to try, just unzip the file inside vendor directory.
I recommend you to change the database password as well.
EDIT: Forgot one file: /app/Http/Controllers/DemoController.php, comment the lines 42 and 43.
All of laracon21 packages are backdoors. Nothing usefull there.
Found backdoors in mehedi-iitdu/core-component-repository too.
This ZIP file contains all modifications I made in those files. It may work, I'm not sure yet. But if you want to try, just unzip the file inside vendor directory.
I recommend you to change the database password as well.
EDIT: Forgot one file: /app/Http/Controllers/DemoController.php, comment the lines 42 and 43.
after some time my database blank, Killer Script☠
i just added some addon
https://babia.to/threads/active-ecommerce-cms.8917/post-410268
look this and make it like this it may help you ...
but keep in mind to make a back of the database before you do anything else many thanks to @wonraywildsparks
giving this solution which is working for now... may need to keep on monitoring
Another backdoor found. Something deleted all the store's products. Working on that too.
do you think if the cms was paid and purchased will they still have this troubling backdoors ?
can I report this to Envato? I have purchased this item
It's complicated. In theory yes. Envato prohibits any type of backdoor in its products. But if backdoors are not active when using the software legitimately, it is difficult to explain how you found the backdoor.
But the code that deletes the entire database is very explicit, I think it can be reported.
Yes, seems like it.
User has no privacy for his business - not a good decision
Yes, exactly....
You should check and if found then report the envato team then....
The backdoor that drops the database has been inserted into the routes. This opens a security vulnerability. If a malicious agent accesses that particular route in a store's system using Active eCommerce, even if the software was legitimate, it would trigger the behavior of the backdoor, erasing all data from the database.
Similar threads
