I have applied the SUPEE-9767 patch for the correct version ( of Magento and in the admin area, I can see the warning at the top of the page, indicating that the patch was successful.

enter image description here

However, when I navigate to the settings menu to enable the form-key option, it is not there.

enter image description here

I've cleared cache etc. and nothing seems to make the option visible. I've just updated about a dozen sites on different versions of Magento with no issues but this site is causing a huge problem. Can anyone help me to fix this issue please?

1 Answer 1


Enable Form Key Validation On Checkout not show in backend means SUPEE-9767 not properly applied.

Please confirm that the below files are updated.

app/code/core/Mage/Checkout/etc/system.xml app/design/adminhtml/default/default/template/notification/formkey.phtml

Hope it will helpful for you.

  • Thanks, that worked perfectly. For some reason app/code/core/Mage/Checkout/etc/system.xml had not been updated. Perfect, thanks again :)
    – David
    Jul 4, 2017 at 8:20
  • Great news Any help based on Security patch please ask :) Jul 4, 2017 at 8:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.