Advanced Search

— Forum Scope —




— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

mail_open
Magmi Importer - Host provider has reported a 'malicious file'
David Patterson
Member
April 10, 2015 - 8:35 am
Member Since: April 13, 2014
Forum Posts: 127
sp_UserOfflineSmall Offline

My hosting provider has sent me the following message:

This is an urgent message concerning your account. Our anti-virus scanner has reported that a malicious file has been uploaded to your webspace.
Name of the file: ~/magento/magmi-importer/frontend.php

Has anyone else received a message like this? Has the magmi importer recently been updated?

David Patterson
Member
April 10, 2015 - 11:21 am
Member Since: April 13, 2014
Forum Posts: 127
sp_UserOfflineSmall Offline

An update.

I have just noticed the understandinge magmi importer skin has been removed and magmi is reporting ‘Upgrade/Upload function are disabled for security reasons’. See image below.

https://drive.google.com/file/d/0B2nYLflCM2ewbXZvSXRiVFlPY00/view?usp=sharing
[Image Can Not Be Found]

Is anyone else having this problem with magmi?

Avatar
Matthew Ogborne

Founder
April 10, 2015 - 12:23 pm
Member Since: July 18, 2013
Forum Posts: 4565
sp_UserOfflineSmall Offline

Hi David,

Thats not the UE version of Magmi and that function was removed because users were not securing Magmi and they were being attacked.

See this blog post https://understandinge.com/magmi-mistakes/ for mistake #1 when using the default version of Magmi.

Matt

"Selling an item online is easy, but making living from a business that sells online, well that’s something different entirely!"

Ultimo Magento Theme

David Patterson
Member
April 16, 2015 - 9:37 pm
Member Since: April 13, 2014
Forum Posts: 127
sp_UserOfflineSmall Offline

@matt – hello Matt. I did have the UE version of Magmi installed however after receiving an email from the hosting provider about a malicious file, the UE version of magmi had been removed leaving the default version. The worrying thing is that with the default version of magmi i did not need a password to login (I have since set up the UE version of magmi with password) so to be safe I am going to change my database password used by magmi. I can update magmi of the new database password under the configuration tab. Will i also need to update magneto with the new password and if so do you know where i need to enter it?

Avatar
Matthew Ogborne

Founder
April 23, 2015 - 7:59 am
Member Since: July 18, 2013
Forum Posts: 4565
sp_UserOfflineSmall Offline

Hi David,

If you have changed the MySQL users password for Magento, this can be updated in app/etc/local.xml as this file has all the Magento database details stored in it.

Hope that helps,

Matt

PS. Apologies for the delay in replying.

"Selling an item online is easy, but making living from a business that sells online, well that’s something different entirely!"

Ultimo Magento Theme

 

Why Should You Join UnderstandingE?

 
  • Access to over 500 step-by-step video tutorials
  • +20 video courses available
  • Magento, M2E Pro, Magmi, eBay, Amazon & Design all covered
  • Everything is in 100% Plain English
  • Learn how to build your own multi-channel software for eBay & Amazon
  • Access to the community forums, meet fellow business owners like yourself

Join Now with 2 Clicks

 

Join now for less that £1 per day you can gain access to over 400 step-by-step video tutorials & learn how to build your very own multi-channel software.

 

Forum Timezone: Europe/London

Most Users Ever Online: 1012

Currently Online:
19 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Top Posters:

Jim @ Moogento: 688

Steve Froggatt: 514

Badeth - UE: 513

Jimbob: 453

Paul Cartwright: 414

Forum Stats:

Groups: 6

Forums: 37

Topics: 5221

Posts: 27486

Administrators: Matthew Ogborne: 4565, Dave Furness: 4606