How to identify if website using cs-cart? Is Wallmart using CS-Cart?

General General Questions
1

Hi guys,

Do you know how to identify if one website is using cs-cart? even if there already done some heavy modification? I just check out wallmart.com and I think it’s also using cs-cart. Is that true?

2

No. Not even close. It looks like their site is based off of a Struts Java Application. [url=“http://struts.apache.org/”]http://struts.apache.org/[/url]



All you need to do is add ?version to any domain to see if it is using cs-cart. If it is it will display the cs-cart version.

3

wow… that’s cool, thanks a lot :)

4

hmm i see this as a securety risk :-/



is it posible to block this feture? (?version)

5

You could bracket the code in init.php to be conditional upon AREA == 'A'

6

Hi tbirnseth



can you be more spesific?



i have changed this line



if (isset($_REQUEST['version'])) {



to



if (isset($_REQUEST['SOME THING ELS HERE'])) {



so that i can still get the info but with some secret word or frase.





but if it is posible to only get the info wen logd in to admin panel that would be great and better i think

7

I would simply change it to read:


if ( AREA == 'A' && isset($_REQUEST['version'])) {


This would require you to be logged in via admin. But note that this might make getting support from cs-cart a bit more difficult since they would not be able to truly identify the version in offering advice. You would have to give them admin access to your store.



Choice for each merchant to make. So far, I don't think there are any known vulnerabilities and hence knowing the version is not an advantage to anyone.

8

It's also used for updates so modifying the actual version name would cause a problem.

9

@tool - you sure about that? I thought it siimply used the define CART_VERSION

10

Not a 100% sure but I think I had changed it some years ago and had issues with the upgrade.