Loaded Commerce Community

Hello,

Each time I edit mainpage.php it saves the page as a blank. This occurs whether I use the admin panel editor or edit the file directly and upload it. I can edit the file through cPanel's code editor and the file saves fine but re-opening the file finds it blank again.

includes/languages/english/mainpage.php is set to 777 permissions.

Can anyone help with this?

Thanks,

Maybe check that the mainpage.php file in /templates/default/mainpage_modules is pointing to the right place? Also, the permissions on the /english folder itself?

Simon

Thanks for your response.

/templates/default/mainpage_modules/mainpage.php points to

include(DIR_WS_LANGUAGES . $language . '/' . FILENAME_DEFINE_MAINPAGE);

Which translates to languages/english/mainpage.php

The file and english directory are set to 777, still having the same problem.

The /inc/lang/eng/mainpage.php file shouldn't be 777 ... 646 at most. Try editing it again and uploading via ftp.
755 on the /inc/lang/eng folder should be enough too.

There are a bunch of reasons for probs here, hacking attempt is near the top. Check your /images folder for .php hack files etc. 6.2 carts are prone to being hacked.

Simon

Thanks again Simon,

I have adjusted the permissions on those files/folder to a more suitable level. I've looked through the files for the site and cannot find anything suspicious in the usual places.

I'm not sure if this is relevant but the WYSIWYG is active for the Define Mainpage tool, however this does not show when visiting the page to edit it. I have tried editing this page with the WYSIWYG active and inactive.

Could this be related?

Possibly, but easy to test ... just go through the file manager in cPanel / hosting panel and edit /i/l/e/mainpage.php directly ... here's the default code for mainpage.php:


If that doesn't work then there must be some problem further up the line ... right click View Source on the blank page in the cart and check your error log messages.

Simon

Hi Simon,

Editing the file in cPanel results in a success message from the file manager, however opening the file reveals the file is blank again.

I have no errors in the cPanel error log and view source just gives an empty set of <td></td>'s

mainpage.php is still 646 on permissions.

Not the cPanel error log ... see if there is a file created in the root of the store called error.log, or in /debug.
Also have you confirmed that you're actually editing the right file? Depending on your template it could be possible for another mainpage.php to be in your /template area (and not be the one in /i/l/english ... ?

Are you typing this stuff in or copy / pasting from something like Word?

Simon

I cannot find such an error log, assuming one isn't present.

This appears to be the correct file, either way the file is wiped immediately after editing through cPanel.

I've tried both copy and pasting and then just typing in test strings, neither produces results.

I literally cannot think of any other way to fix this :/

Have you actually got the mainpage set as a main page module in your active template?
Take a look at permissions on the /i/l/english folder. Do you have articles / info pages working that are editable and can show? Try 666 on the mainpage file.
Simon

Hi Simon,

Thanks for sticking with me on this. I appreciate it!

I am able to edit all my information pages which save correctly and display as they should on the website. i/l/english is 755, even at 777 mainpage fails to update.

Yes, mainpage is set as a frontpage module

Just a quick re-cap of what I'm doing and what occurs.

Admin Panel -> Content Manager -> Define Mainpage -> Insert Random Text -> Save.

As soon as I click save and the page reloads to save, the text field is totally blank. Also although the WYSIWYG is active (tried off/on -> basic/advanced), I only have a default basic text box for editing.

Thanks again,

One very interesting element here is prominent in the initial report.



This would occur when an exploit scanner picked up a fingerprint or regex match in the submitted contact via either of these routes. (http request or FTP link).

Contact your host - describe this experience and see if they can shed any light on what is going on.

Also - try submitting content with NO HTML, PHP or any other coding or markup AT ALL. Just the phrase 'hello world' should go through fine if this is the case. (unless a hack on your desktop machine is auto-inserting something evil).

David

Hi Guys,

I went for a full re-install which has solved this problem. Took a while but the time spent on it to this point was more than re-installing from fresh and re-instating assets etc.

I can only assume there was a hack somewhere which was causing this.

Thanks for all your help.