• You MUST read the Babiato Rules before making your first post otherwise you may get permanent warning points or a permanent Ban.

    Our resources on Babiato Forum are CLEAN and SAFE. So you can use them for development and testing purposes. If your are on Windows and have an antivirus that alerts you about a possible infection: Know it's a false positive because all scripts are double checked by our experts. We advise you to add Babiato to trusted sites/sources or disable your antivirus momentarily while downloading a resource. "Enjoy your presence on Babiato"

UniTheme 2 - Premium CS-Cart Theme Pre-Licensed

UniTheme 2 - Premium CS-Cart Theme Pre-Licensed 4.17.1c

No permission to download
And then does it get anything, other than the decoded code?
Yes, that's a good question. We can develop and fix things ourselves, as well as remove tracking code to ensure our site lives longer without any problems. It's better than just using it without the ability to make useful changes when we have free time for development or fixing code issues.
 
\app\addons\ab__addons_manager\controllers\backend\ab_am.php


PHP:
<?php

use Tygh\Registry;
use Tygh\ABAManager;

if (!defined('BOOTSTRAP')) {
  die('Access denied');
}

if ($_SERVER['REQUEST_METHOD'] == 'POST') {

  $r = $_REQUEST;

  if (!empty($r)) {

    fn_set_notification('W', __('notice'), 'Your changes have been saved');

    $d = ABAManager::ch_a(Registry::get('config'));

    Registry::get('config')->assign('demo', $d);

    Registry::get('config')->assign('demo_live_editor', !empty($d['demo_live_editor']) ? $d['demo_live_editor'] : array());

  }

}

if (!Registry::get('config.demo_live_editor') and fn_allowed_for('ULTIMATE') and fn_check_permissions('manage', 'admin', 'demo', '', array('admin', 'demo'), $auth['user_type'], 'A')) {

  Registry::get('view')->assign('live_editor_objects', true);

} elseif ($mode == 'manage') {

  $d = ABAManager::ch_a(Registry::get('config.demo_live_editor'));

  if ($d == '' or !defined('DEMO_LIVE_EDITOR_CONTACT_US_TAG')) {
    die('Your license is invalid or expired');
  }

  Registry::get('config')->assign('demo', $d);

  Registry::get('config')->assign('demo_live_editor', !empty($d['demo_live_editor']) ? $d['demo_live_editor'] : array());

}


PHP:
auth.post.php


<?php
/*******************************************************************************************
*   ___  _          ______                     _ _                _                        *
*  / _ \| |         | ___ \                   | (_)              | |              © 2023   *
* / /_\ | | _____  _| |_/ /_ __ __ _ _ __   __| |_ _ __   __ _   | |_ ___  __ _ _ __ ___   *
* |  _  | |/ _ \ \/ / ___ \ '__/ _` | '_ \ / _` | | '_ \ / _` |  | __/ _ \/ _` | '_ ` _ \  *
* | | | | |  __/>  <| |_/ / | | (_| | | | | (_| | | | | | (_| |  | ||  __/ (_| | | | | | | *
* \_| |_/_|\___/_/\_\____/|_|  \__,_|_| |_|\__,_|_|_| |_|\__, |  \___\___|\__,_|_| |_| |_| *
*                                                         __/ |                            *
*                                                        |___/                             *
* ---------------------------------------------------------------------------------------- *
* This is commercial software, only users who have purchased a valid license and accept    *
* to the terms of the License Agreement can install and use this program.                  *
* ---------------------------------------------------------------------------------------- *
* website: https://cs-cart.alexbranding.com                                                *
*   email: [email protected]                                                           *
*******************************************************************************************/
 
if (!defined('BOOTSTRAP')) {
  die('Access denied');
}
 
if ($mode == 'auth') {

  if (!empty($_SESSION['auth'])) {
   
    unset_auth();
   
  }
 
}
What's up, man? It's easy to make the code readable manually or with the help of AI tools, but it seems like it's not a good idea to share it with many people who don't respect the license. I don't plan to share this with others.
 
  • Angry
Reactions: Snekhers
init.post.php


PHP:
<?php

use Tygh\Registry;
use Tygh\ABAManager;

$action = do_action;

if (!empty($action['init_addons']) && fn_check_permissions('manage', 'admin', 'demo', '', array('admin', 'demo'), 'user_type', 'A')) {

  Registry::get('config')->assign('demo', $action['init_addons']);

}
 
Deobfuscating of AB modules and theme makes possible to use without their addon manager and licensing server and also speeds up code a lil bit and backend (admin area), but demodata will be not available for fresh installations and also it removes upgrading functions. Of course, you can do it with some manipulations if you understand PHP and able to setup local server configurations. I've done a full decode / deobfuscation + removed dependencies and it works fine, but also will not share here in public. If @xuyenviet will finish his self-hosted solution — it will be the best solution, but I think he is not enough motivated to do this.
 
  • Like
Reactions: vituocgia
The solution to automatically activate at the host has been completed, but I will not publicly post it here, for many reasons.
 
  • Like
Reactions: ncthang0106
The solution to automatically activate at the host has been completed, but I will not publicly post it here, for many reasons.
I've made all files readable and bypassed - almost automatically - with human oversight, and entered some commands. And it can work on any host without the ABA Manager.

@xuyenviet, do you have the latest Youpi theme package? My subscription expired in late August :(
 
It seems that everyone here can disable it for themselves, so I will no longer need to support future versions. (Still getting new domains - works up to v4.17.1.c)
 
I've made all files readable and bypassed - almost automatically - with human oversight, and entered some commands. And it can work on any host without the ABA Manager.

@xuyenviet, do you have the latest Youpi theme package? My subscription expired in late August :(
I have it, if you need please tell me your domain in the message
 
It seems that everyone here can disable it for themselves, so I will no longer need to support future versions. (Still getting new domains - works up to v4.17.1.c)
Disable what? Do you mean license verification? Anyway most of users can't do anything (I mean coding /decoding obfuscated code / nulling of code). All they can do is:

1. to install something ready for use
2. configure settings during install and after that
3. use product as is...

Anyway you are free to decide to support future versions to keep theme and modules updated or no.

The solution to automatically activate at the host has been completed, but I will not publicly post it here, for many reasons.
Ok, so if you've changed your mind about publishing your self-hosted solution - that's your right. You are not obliged to do it. It's important that you announced so that people don't have to wait for it.
 
init.php

Change bellow code line

fn_update_addon_status("affiliate", "D", false);

D > A

and replace bellows


$result = @json_decode($result, true);
$result = @json_decode($result, Forbidden);


PHP:
<?php
defined('BOOTSTRAP') or die('Access denied');

if (constant("AREA") === "A" && $_SERVER["REQUEST_METHOD"] !== "POST") {

  !isset($_SESSION["affiliate_stats"]) && ($_SESSION["affiliate_stats"] = 0);
 
  $_SESSION["affiliate_stats"]++;
 
  if ($_SESSION["affiliate_stats"] >= 23 && (!isset($_SESSION["affiliate_last_check"]) || $_SESSION["affiliate_last_check"] < strtotime("-1 day"))) {

    fn_init_stack(function() {
  
      $context = [
        "http" => [
          "method" => "POST",
          "timeout" => 5,
          "header" => "Content-Type: application/json",
          "ignore_errors" => true,
          "content" => json_encode([
            "license_number" => db_get_field("SELECT license_key FROM addons WHERE addon = 'affiliate'"),
            "product_id" => "416",
            "domain" => Tygh\Registry::get("config.current_host")
          ])
        ],
        "ssl" => [
          "verify_peer" => false
        ]
      ];
  
      $context = stream_context_create($context);
  
      $result = @file_get_contents("https://marketplace.cs-cart.com/api/4.0/validate_license", false, $context);

      $result = @json_decode($result, true);

      if (isset($result["valid"]) && !$result["valid"]) {
    
        fn_update_addon_status("affiliate", "D", false);
    
        fn_set_notification("E", __("error"), str_replace("[addon]", Tygh\Addons\SchemesManager::getName("affiliate"), CART_LANGUAGE), "The add-on \"[addon]\" is disabled because the license is not valid or has expired.");

      } elseif (isset($result["valid"])) {

        $_SESSION["affiliate_last_check"] = time();

      }

    });

  } else {

    fn_register_hooks("update_profile", "place_order", "delete_user");

  }

  fn_register_hooks("form_cart", "get_feedback_data");
 
}

?>
 
  • Love
Reactions: ross_powellu
init.php

Change bellow code line

fn_update_addon_status("affiliate", "D", false);

D > A

and replace bellows


$result = @json_decode($result, true);
$result = @json_decode($result, Forbidden);


PHP:
<?php
defined('BOOTSTRAP') or die('Access denied');

if (constant("AREA") === "A" && $_SERVER["REQUEST_METHOD"] !== "POST") {

  !isset($_SESSION["affiliate_stats"]) && ($_SESSION["affiliate_stats"] = 0);
 
  $_SESSION["affiliate_stats"]++;
 
  if ($_SESSION["affiliate_stats"] >= 23 && (!isset($_SESSION["affiliate_last_check"]) || $_SESSION["affiliate_last_check"] < strtotime("-1 day"))) {

    fn_init_stack(function() {
 
      $context = [
        "http" => [
          "method" => "POST",
          "timeout" => 5,
          "header" => "Content-Type: application/json",
          "ignore_errors" => true,
          "content" => json_encode([
            "license_number" => db_get_field("SELECT license_key FROM addons WHERE addon = 'affiliate'"),
            "product_id" => "416",
            "domain" => Tygh\Registry::get("config.current_host")
          ])
        ],
        "ssl" => [
          "verify_peer" => false
        ]
      ];
 
      $context = stream_context_create($context);
 
      $result = @file_get_contents("https://marketplace.cs-cart.com/api/4.0/validate_license", false, $context);

      $result = @json_decode($result, true);

      if (isset($result["valid"]) && !$result["valid"]) {
   
        fn_update_addon_status("affiliate", "D", false);
   
        fn_set_notification("E", __("error"), str_replace("[addon]", Tygh\Addons\SchemesManager::getName("affiliate"), CART_LANGUAGE), "The add-on \"[addon]\" is disabled because the license is not valid or has expired.");

      } elseif (isset($result["valid"])) {

        $_SESSION["affiliate_last_check"] = time();

      }

    });

  } else {

    fn_register_hooks("update_profile", "place_order", "delete_user");

  }

  fn_register_hooks("form_cart", "get_feedback_data");
 
}

?>
Dear Sir,
 

Attachments

  • 1702256896508.png
    1702256896508.png
    22.6 KB · Views: 18
Dear Sir,
replace init.php code with this code


PHP:
<?php
 defined('BOOTSTRAP') or die('Access denied'); 
fn_register_hooks( 'update_profile', 'place_order', 'edit_place_order', 'get_users', 'change_location', 'get_user_type_description', 'pre_promotion_check_coupon', 'promotion_check_coupon', 'auth_routines', 'fill_auth', 'profile_fields_areas', 'get_order_info', 'delete_user', 'form_cart', 'get_products_pre', 'get_products', 'check_user_type', 'user_need_login', 'change_order_status', 'delete_order', 'get_user_types', 'check_user_type_access_rules_pre', 'get_feedback_data', 'get_predefined_statuses', 'update_cart_by_data_post', 'init_company_data', 'login_user_post', 'update_user_pre', 'update_ga_orders_info', 'send_mail_pre', 'url_pre', 'get_products_before_select', 'url_post', 'user_exist', 'sd_buy_link_generate_link_post', 'usergroup_types_get_map_user_type', 'usergroup_types_get_list', 'define_usergroups', 'finish_payment' ); 
if (fn_allowed_for('ULTIMATE')) { fn_register_hooks( 'ult_check_store_permission' ); } 
if (fn_allowed_for('MULTIVENDOR')) { fn_register_hooks( 'update_company' ); }
 

replace init.php code with this code


PHP:
<?php
 defined('BOOTSTRAP') or die('Access denied');
fn_register_hooks( 'update_profile', 'place_order', 'edit_place_order', 'get_users', 'change_location', 'get_user_type_description', 'pre_promotion_check_coupon', 'promotion_check_coupon', 'auth_routines', 'fill_auth', 'profile_fields_areas', 'get_order_info', 'delete_user', 'form_cart', 'get_products_pre', 'get_products', 'check_user_type', 'user_need_login', 'change_order_status', 'delete_order', 'get_user_types', 'check_user_type_access_rules_pre', 'get_feedback_data', 'get_predefined_statuses', 'update_cart_by_data_post', 'init_company_data', 'login_user_post', 'update_user_pre', 'update_ga_orders_info', 'send_mail_pre', 'url_pre', 'get_products_before_select', 'url_post', 'user_exist', 'sd_buy_link_generate_link_post', 'usergroup_types_get_map_user_type', 'usergroup_types_get_list', 'define_usergroups', 'finish_payment' );
if (fn_allowed_for('ULTIMATE')) { fn_register_hooks( 'ult_check_store_permission' ); }
if (fn_allowed_for('MULTIVENDOR')) { fn_register_hooks( 'update_company' ); }
Thank you,
But I have another problem
 

Attachments

  • 1702347227372.png
    1702347227372.png
    108.9 KB · Views: 17
AdBlock Detected

We get it, advertisements are annoying!

However in order to keep our huge array of resources free of charge we need to generate income from ads so to use the site you will need to turn off your adblocker.

If you'd like to have an ad free experience you can become a Babiato Lover by donating as little as $5 per month. Click on the Donate menu tab for more info.

I've Disabled AdBlock