[affiliatepro]

As of 27th of January I’m using the latest build of WP eStore.

I tried looking for the work around located here

https://support.tipsandtricks-hq.com/forums/topic/xss-attack-caused-by-wp-cart-for-digital-productslibjquerycookiejs

Could not find exact line of code below in the latest build, as per workaround link above

wp_enqueue_script(‘jquery.cookie’,WP_ESTORE_LIB_URL.’/jquery.cookie.js’);

My question: In the latest build did this code change and is there another line of code I need to delete?

Also, is there setting in the hosting where I can go in and edit the apache mod_security and if so what could I modify it too?

Thanks,

[affiliatepro]

I just got this back from GVO support…. has something to do with cart..

Here’s the info they sent me…

Hello,

I have removed the block now. You will be able to access the site now. It seems the method you are using in your site is against the policy set in the server and caused the block. Following was there in the modsecurity logs which caused the block.

[Tue Jan 25 17:20:28 2011] [error] [client 71.199.4.124] ModSecurity: Access denied with code 406 (phase 2). Pattern match “(?b(??:type\b\W*?\b(?:text\b\W*?\b(?:j(?:ava)?|ecma|vb)|application\b\W*?\bx-(?:java|vb))script|c(?:opyparentfolder|reatetextrange)|get(?:special|parent)folder|iframe\b.{0,100}?\bsrc)\b|on(??:mo(?:use(?:o(?:ver|ut)|down|move|up)|ve)|key(?:press|d …” at REQUEST_FILENAME. [file “/usr/local/apache/conf/modsec2.user.conf”] [line “117”] [id “950004”] [msg “Cross-site Scripting (XSS) Attack”] [data “.cookie”] [severity “CRITICAL”] [tag “WEB_ATTACK/XSS”] [hostname “antiques-furniture-collectables.info”] [uri “/wp-content/plugins/wp-cart-for-digital-products/lib/jquery.cookie.js”] [unique_id “TT9avAzMpLIAAFfVM5EAAAAj”]

Please check with your developer for the correct usage.

Any way to fix this? What does “Web Attack” mean?

Thanks

[affiliatepro]

Thank you, I’ll give it a shot… Keep up the good work!

[affiliatepro]

That would be great, it’s http://affiliatepro.com/advertise-on-affiliatepro/

I’m using headway to design the blog fyi

Thanks a ton

[Author]

Posts