This is a great mod, had it installed for a while, but only just worked out how to use it to ship physical items, paid by with credits, a feature I had been looking around for a while now.

Did you try going into ACP -> Point Market -> Settings & Staff Permissions. Then clicking Point Market: Global Settings. In that menu, scroll to "Primary Point Field" and make sure it says "market_xperience" in the textbox, without the quotes.

This mod is definitely not safe.
My forum just got hacked from someone, and luckily, he didn't cause much damage.
I check the Control Panel logs. And what's the first thing he did? Go to Market_items.php

There is indeed an exploit, but as far as I know it has been fixed a few pages back.

You can't help if you just post panicked info... By the sounds of your post, AFTER you got hacked this person went to market_items. Might want to verify that the person didn't insert something malicious in your market.

What version of vB are you running? What version of the market? Have you checked with your host? Reviewed apache logs? Please post pertinent info.

I did look at his logs. Like I said, first thing he went was to the market. As other people have posted, there is an exploit. If you look at the link, it is showed that the exploit is for 3.1x, and I currently have 3.1x installed, the latest version. Don't know where you got 'alpha' from. I'm running vB 4.1.6. I'm still waiting for more info from our host.

With that being said, it should still be checked out. But I will admin I panicked when it happened. The exploit posted still shouldn't be anything to be ignored.

The exploit only existed in an alpha version and has since been patched. It wasn't ignored. So that isn't the issue.

that makes no difference. I also have the same problem where online.php is getting the database error.

Here you go
https://vborg.vbsupport.ru/showpost....postcount=1905

I have released the latest version of the Point Market. This is the professional version minus the branding free option that I use on the other website.

Right now I have the Users Online Colors Query plugin enabled but everything inside has been commented out. I still haven't figured out the exact way to fix this bug yet.

There is also a very nice feature related to a gift's link on the postbit for users to use in this version and a few other minor changes. I recommend everyone use the updated version if possible.