X-Cart forums

[inboxnews]

Originally Posted by albertchui

this is a very very bad guy, he installed the mod for me and i paid him $120 which was not working, i had to report to my credit card to file dispute, and he logged in my web site using the password i gave him and broke down my web site, fortunately i could recover it and changed password, he keep trying to using the password and similar phrase to log in.

why i know it was him, xcart has the master log in failure warning and i got the ip address was from 24.40.216.236 north carolina, i found his info from the same address:

Registrant:
PHP Site Solutions

Technical Contact:
Langevin, Jonathan support@phpsitesolutions.com
PHP Site Solutions
235 N. High Point Rd
Southport, North Carolina 28461
United States
7049050271


So, if you guy paid him and no respond, call his phone number 704-905-0271, first file the dispute from your credit card company, i swear if this guy try again to log in my admin, i will report to the policy and anti hack organization.

CALL THE FBI.

[wicked]

Originally Posted by albertchui

this is a very very bad guy, he installed the mod for me and i paid him $120 which was not working, i had to report to my credit card to file dispute, and he logged in my web site using the password i gave him and broke down my web site...

If this is indeed true, then this is disgraceful and highlights the need to deal with more legit companies rather than one man show's like this guy, who's integrity is seriously lacking...

[BCSE]

People who use this module or the free one should note that they are supporting him and his website if they do not remove some of the code. His install code is putting links back to his site in the comments of people's websites which is being picked up by google as links to his website. We all know what that will do for his site for SEO rankings and will do to poor people who become victim because they do not know of this thread.

You will find something similar to this in your source of your site:
<!-- URLs Rewritten by XCSEO Pro v1.1.5 - created by PHP Site Solutions - http://www.phpsitesolutions.com -->


I've also seen some things that appears to be intentionally malicious stuff to other people's sites to self promote his.

Carrie

[hoosierglass]

Carrie brings up a good point that should be addressed.

If I hire BCSE, WebsiteCM, Paul D or anyone else to do a MOD, security check, upgrade or anything else and they ask to put something like that in my site where it is not visible to my customers I have no problem with it at all. They have provided me with a service and the monetary amount only partially covers their work. I would of course want to know where it is so that if anything happened like with PHP I could pull it out. (Although I doubt I would have to ever worry about the three I mentioned)

On the other hand putting something like that on someones website without disclosure is in my book unethical.

Mike

[Freakmode]

If you open up

modules/XC_SEO/outputfilter.seo.php

Just comment out or remove the following line (about line 493)

 $page_src = str_replace('</body>', $this->_seo_notice . '</body>', page_src);

That removes the embedded linkback

It's a 2 second job

Please note that this is for the free version - I guess the paid for version runs the same way

[Stizerg]

Pro version is protected by ionCube PHP Encoder. How to unencrypt it?

[carpeperdiem]

Originally Posted by Stizerg

Pro version is protected by ionCube PHP Encoder. How to unencrypt it?

You can't. And if you could, it would be in violation of copyright laws. Even if the original vendor disappears, the copyright is still valid.

There will be NO such discussion on this message board about busting encryption or piracy. It will NOT be tolerated here. Period.

The best thing to do is remove it and use an alternative technology from a reliable vendor.

[BCSE]

Originally Posted by carpeperdiem

You can't. And if you could, it would be in violation of copyright laws. Even if the original vendor disappears, the copyright is still valid.

There will be NO such discussion on this message board about busting encryption or piracy. It will NOT be tolerated here. Period.

The best thing to do is remove it and use an alternative technology from a reliable vendor.

If you must keep using it, you could alternatively create an output filter and strip out the commented promotion for their site. You would do this in include/func/func.core.php and do it towards the end of func_display function.

As Jeremy mentioned, unencrypting the source code is a violation of copyright laws.

Carrie

[shellshack]

Originally Posted by 01bodyjewellery

If you open up

modules/XC_SEO/outputfilter.seo.php

Just comment out or remove the following line (about line 493)

 $page_src = str_replace('</body>', $this->_seo_notice . '</body>', page_src);

That removes the embedded linkback

It's a 2 second job

Please note that this is for the free version - I guess the paid for version runs the same way

I just installed xcseo a couple of weeks ago (prior to finding this thread) and the mentioned code is not there, so I commented out

$this->_seo_notice = '<!-- URLs Rewritten by XC SEO v1.4.0 - created by PHP Site Solutions - http://www.phpsitesolutions.com -->' . PHP_EOL;

and the links are not on my site any more and it looks like everything is working but I may have messed something up as i am a total newb with this stuff.

Actually, as I am writing this it looks like this might be a copyright violation?

If so I will leave the code but kill the link.

[wicked]

anyone know how to remove it from the pro version??