X-Cart: shopping cart software

X-Cart forums (https://forum.x-cart.com/index.php)
-   Third Party Add-Ons for X-Cart 4 (https://forum.x-cart.com/forumdisplay.php?f=45)
-   -   Smart Search from alteredCart :: Spell Checking, Did You Mean? and More. (https://forum.x-cart.com/showthread.php?t=31583)

wjbrewer 04-08-2009 04:54 AM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
Quote:

Originally Posted by Manic
I have Smart Search installed. I just noticed when searching for a word with the letters "char" (such as "charles" or "character"), it displays a message "invalid search" on a white background and my entire store disappears?


This was added when the were a lot of attacks using CHAR keyword attempting to hack X-Cart. X-Cart versions 4.x and higher are not vulnerable to this attach.

To change this open _search.php and find this about line 100:

PHP Code:

// Kill search when certain characters are used //
        
foreach (array(";","@","http","script",".php",".txt",".html",".htm","exec","char") as $kill)    
            if (
stristr($searchstring$kill))
                die(
'Invalid Search'); 


You can remove the entire block of code, or just the "exec" and "char" at the end.

This code is no longer in the Smart Search for version 2.0 and on.

maildodge 04-08-2009 05:28 AM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
How can we get the latest version of smart search?

Thanks.

wardworth 04-24-2009 06:33 AM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
If I upgrade Smart Search from 1.3.4 to 1.3.10 which files do I actually need to update? I only ask as some of my smart search files have been fixed by Bill over the last few years and I don't want those alterations to be affected and break my store. The main reason for upgrading is to enable boolean by default (which is in the new config file) as we seem to be getting some very sporadic results when searching by manufacturer and model number when boolean isn't used. Is manufacturer not a searchable field?

cycloneuk 06-19-2009 05:39 AM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
Anyone using Smart Search on 4.1.12? The _search.php file just displays a blank page. It was working fine on 4.1.11

rhu 06-23-2009 05:25 PM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
I have Smart Search and it works great, but McAfee Secure says that hackers can inject SQL thru the search... Can somebody from alteredCart help me out and resolve this issue? McAfee has it as a "level 3" vulnerability and it won't show the McAfee Secure seal on my site because of it...

ahumanz 07-16-2009 08:14 PM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
hi wjbrewer,

does the smart search now support advanced filter mod?

is there a place where i can test out the search for >1000 products, with before using and after using the smart search?

last thing, i tried the demo, using a keyword javascript (was looking for the javascript book) and it returned "invalid search".

retrtrtrytrutru 07-16-2009 11:40 PM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
Quick question, could't find the answer myself. Can I also use Smart Search to block users from searching in !PRODUCTCODE for example? I have an Excel database to fill our store with and the !PRODUCTCODE column is for internal use only, it contains codes that I don't want our customers to see/search in. Thanks in advance.

MattAustin 08-05-2009 05:07 AM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
Could anyone who is using Smart Search V2 upwards please let me know their sites URL as on our site it crashes IE6 and I would like to know if anyone is experiencing something similar8O

canuck 08-08-2009 08:05 PM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
Quote:

Originally Posted by rhu
I have Smart Search and it works great, but McAfee Secure says that hackers can inject SQL thru the search... Can somebody from alteredCart help me out and resolve this issue? McAfee has it as a "level 3" vulnerability and it won't show the McAfee Secure seal on my site because of it...


Is this still currently an issue? Or was it resolved?

JazzyJeff 08-11-2009 11:06 AM

Re: Smart Search from alteredCart :: Spell Checking, Did You Mean? and More.
 
Quote:

Originally Posted by MattAustin
Could anyone who is using Smart Search V2 upwards please let me know their sites URL as on our site it crashes IE6 and I would like to know if anyone is experiencing something similar8O


We are also getting sporadic reports of Smart Search crashing Internet Explorer; don't think it is limited to IE6; apparently doesn't occur with other browser platforms.


All times are GMT -8. The time now is 05:40 AM.

Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.