iGuru | User Login System Hack - Continuation

mcity

On a previous ticket, we were able to retreive some over-rides; which helped with how users logged in.
https://www.joomlart.com/forums/d/34921-account-activation-not-working-like-rest-of-site-has-in-place

It works and that is great..

What we did notice is that there were still users that were able to login from backdoors that we didn't knew existed at that time...

In this quick screen-share, I demo how we believe they are logging in via iGuru, instead of the alternative, we've discussed in previous ticket.

https://drive.google.com/file/d/16qBHFWi47eju63tGWUykfdFmScpauJ1S/view?usp=sharing

Take your time, we are patient and understand this might be out of the area of what we can request.
Yet, we are hopeful there is a quick workaround, that wouldn't cause much trouble to share.
As always, thanks for your help in advance.

manhta

mcity

i added two new lines of file /templates/ja_sensei/html/com_guru/guruprograms/tabs.php, number 1397 and 1398

please check

mcity

Thanks manhta for your rapid-fire response.
That partially worked...

For some reason though, it only worked for one Course Category.
For instance, we have a course category named:

 https://kissielts.com/courses/4-1-on-1

And every course listed here, has a sidebar with a clickable link called, "Take This Course"; which take them to a cart page: for example:

https://kissielts.com/index.php?option=com_guru&amp;controller=guruPrograms&amp;task=buy_action&amp;course_id=68

It is the same sidebar from the one we changed before, so i am lost as why this one didn't change like the other did. Perhaps, its because its a different course category?

I reviewed the tabs.php, but was lost and didn't want to make a mistake...
Any chance you know what I am talking about and have a fix?

manhta

mcity
I added new change on file /templates/ja_sensei/html/com_guru/guruprograms/view.php , line 913.
Kindly check.

mcity

Thank you so much! manhta