Remove recommended a product to a friend – Joomla VirtueMart

If you want to disable recommended to a friend on the VirtueMart product page, you can disable in VM Admin Configuration/Site/Display/Show the “Recommend to a friend” link.

Here’s how we patched the vulnerability on our sites:

Edit <Joomla root>/administrator/components/com_virtuemart/html/shop.recommend.php

Right under

if( !defined( '_VALID_MOS' ) && !defined( '_JEXEC' ) ) die( 'Direct Access to '.basename(__FILE__).' is not allowed.' );

add this:

header('Location: http://joomla.org/');
exit;