Thank for update version : 9.9.3
Reacted by:
-
The default language of any content posted is English.
Do not create multi-accounts, you will be blocked! For more information about rules, limits, and more, visit the Help page.
Found a dead link? Use the report button!
- Thread starter raz0r
- Start date
- Messages
- 12
- Reactions
- 15
Can you.create thread here for it that would be of great help if you could
Post automatically merged:
I have also seen it somewhere but there isn't any content on it
Reacted by:
- Messages
- 33
- Reactions
- 29
Reacted by:
- Messages
- 30
- Reactions
- 243
Thanks for sharing. Any other updated plugins available?
Reacted by:
there is a new version 9.9.4, check it out
Reacted by:
When I try to install fresh, this error shows on the database install. Any solution?
Reacted by:
raz0r updated Active eCommerce CMS PHP Script by ActiveITzone with a new update entry:
Active eCommerce CMS 9.9.4 NULLED
Read the rest of this update entry...
Active eCommerce CMS 9.9.4 NULLED
LINK PROTECTION PASSWORD FOR THIS UPDATE
version : 9.9.4 (27/006/2025)
- Review Reminder: Boost your store’s credibility and customer trust with the new Review Reminder feature—now built into Active eCommerce CMS.
A dynamic review popup has been introduced. It redirects customers to their purchase history page, allowing them to submit reviews for the delivered items. This Dynamic Popup is...
Read the rest of this update entry...
raz0r 's signature
- Messages
- 4
- Reactions
- 0
Could you help me download this, please?
Reacted by:
- Messages
- 4
- Reactions
- 0
Security Alert — Hacking Method Detected on Active eCommerce CMS
Hello everyone,
I'm sharing this critical security alert following a hacking attempt discovered on our Active eCommerce CMS website hosted on a shared server.
Symptoms Observed:
- Website showing a blank white page.
- Presence of suspicious files and folders in the /www directory.
- PHP files containing obfuscated malicious code using eval(strrev(...)) and curl commands — commonly used for remote code execution.
Example of malicious code found:
Code:
<?php
if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '...') {
// Hidden backdoor access
}
eval("\x3f\x3e" . Tw2kx(strrev($SS8Fu)));
Hacker’s Method:
- Exploiting known vulnerabilities or insecure plugins to upload malicious scripts.
- Deploying a backdoor with password-protected access to gain control.
- Using curl to fetch and execute remote code dynamically.
- Hiding malicious files in folders like /storage, /public, /3f905, etc.
Immediate Recommendations:
- Change all passwords: FTP, admin panel, database, etc.
- Delete all unfamiliar or suspicious files, especially .php and .html.
- Check file permissions — avoid 777 or overly permissive settings.
- Harden your .htaccess file to deny access to .env, .git, etc. (example: htaccess protection).
- Update your CMS and all plugins/extensions immediately.
- If compromised, restore from a clean backup and reinstall the CMS.
Recommended Preventive Measures:
- Block PHP execution in /storage, /uploads, and /temp via .htaccess.
- Disable directory listing.
- Add HTTP security headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy, etc.
- Monitor your access logs for unusual activity.
Reacted by:
hello friends, i have just find out that to be able to ENABLE and USE the MPESA payment gateway from the AFRICAN PAYMENT GATEWAY addon, the ONLY thing you have to do is go to your database, look for the BUSINESS_SETTINGS table, change the value 0 for 1 as seen in the picture here , go to your site clear cache and that is it, enjoy
Reacted by:
