2

I am currently installing 10266 on multiple sites, and when running the patch via cli:

sh PATCH_SUPEE-10266_CE_1.9.2.4_v1-2017-09-13-06-37-37.sh

I receive:

Checking if patch can be applied/reverted successfully...
Patch was applied/reverted successfully.

Perfect. However when I run the sites through magereport.com, 10266 is shown as "not patched", even after providing the backend url. Is this a case of magereport requiring certain permissions to function? If so, which ones?

And yes, I flushed the cache :)

Improve this question
5
  • i have install this patch on one of my site and magereport shows it installed
    – Vaibhav Ahalpara
    Commented Nov 20, 2017 at 12:22
  • Do you have a custom admin theme?
    – seanbreeden
    Commented Nov 20, 2017 at 12:38
  • @seanbreeden There is a custom admin theme in use, though it's not something I'm familiar with as we inherited this from another developer(!). There were no problems when I checked applied-patches.list, so at a bit of a loss as to whether it's patched or not.
    – wickywills
    Commented Nov 20, 2017 at 12:52
  • For 10266, if you have a custom admin theme you have to ensure that the patch runs on your custom files as well. It will require some manual changes.
    – seanbreeden
    Commented Nov 20, 2017 at 19:28
  • 2
    Possible duplicate of Security Patch SUPEE-10266 - Possible issues?
    – Teja Bhagavan Kollepara
    Commented Dec 5, 2017 at 4:18

1 Answer 1

Reset to default
1

For further info on this patch see Security Patch SUPEE-10266 - Possible issues?

Check that you have no custom admin theme files overwriting the patched files for SUPEE-8788. The admin files affected are as follows:

app/design/adminhtml/default/default/template/catalog/product/edit/options/type/file.phtml
app/design/adminhtml/default/default/template/customer/tab/view.phtml
app/design/adminhtml/default/default/template/login.phtml
app/design/adminhtml/default/default/template/notification/toolbar.phtml
app/design/adminhtml/default/default/template/oauth/authorize/form/login-simple.phtml
app/design/adminhtml/default/default/template/oauth/authorize/form/login.phtml
app/design/adminhtml/default/default/template/resetforgottenpassword.phtml
app/design/adminhtml/default/default/template/sales/order/view/history.phtml
app/design/adminhtml/default/default/template/sales/order/view/info.phtml

There are some minor changes in these files that need to be applied to your custom template files in order for MageReport to confirm the patch is in place.

Improve this answer
1
  • 1
    Thank you Matt. Yes, we did have a custom admin theme (we inherited the site from another dev!). I installed the patch on a fresh Mag install and ran a few diffs to find the changes required.
    – wickywills
    Commented Dec 10, 2017 at 16:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.