I see a lot of issues around said patch. Onepage-checkout wont progress past billing form.

I checked all the .phtml forms and ensured they had the form key code. They do. The form key field is seen in browser inspection. I haves both turned on and off "enable form key validation" no change. I think i have done every thing i has seen in the forums I am at a loss. I can't revert the patch as the -R option doesn't work. I may have to go to backups.

Any thoughts?

  • are you sure all your caches have been cleared including css/js and fpc caches? With the form key validation disabled the presence of the form key at one page checkout is irrelevant. Have you checked the system logs for errors?
    – paj
    Commented Jun 13, 2017 at 21:16
  • All caches cleared including js/css from admin, var.cache cleared.. and yes i would have thought if not enabled the code shoudln't have any affect.
    – tbueweb
    Commented Jun 13, 2017 at 22:39

2 Answers 2


Could you please enable the Path hint in admin. Double check the all phtml files having the key code in your template files

<?php echo $this->getBlockHtml('formkey') ?>

Please double check in the following files.

Shipping cart form:


Multishipping billing checkout form:


Multishipping shipping checkout form:


Billing checkout form:


Shipping checkout form:


Payment checkout form:


Shipping method checkout form:


Persistent Billing checkout form:


For More Reference

Security Patch SUPEE-9767 - Possible issues


You can use git private repository for handling the codes. it would be easy to revert the files

  • Thanks , did all that and all the phtml were fine.. I moved the form code to before the /form and before the /fieldlist and other variations. no avail.. In any case the i switched off the security feature in admin and made no change. In teh end I gave up and reverted teh code to pre 9767 and its all fine now and I will give 9767 some shelf time and try again later
    – tbueweb
    Commented Jun 14, 2017 at 17:06
  • Yes this link is helpfull form keys are missing in theme files, check the form key under theme files Commented Jun 30, 2017 at 10:39

Also you could use the Aoe_TemplateHints module to see which templates are being loaded and check the form_key is being passed in your browser inspector. I found another module was responsible, Paypal_InContext, though disabled in admin the template was still loading at the payment options section.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.