1

Last day I Install Patch SUPEE 6788 then my website is blank also widget block so i am very stress please help me how can i resolve it

3
  • You can try using this tool kit that was created specifically for this patch. It should be able to automatically fix your whitelists for you. – travisw Nov 4 '15 at 15:41
  • i apply @7ochem your question but cannot resolve this issue thats why ask for new question – SAAB Nov 4 '15 at 15:51
  • @travisw i see your link but this link apply for ssh but i have no access in ssh can you please tell me how can i upload via ftp – SAAB Nov 4 '15 at 15:54
1

What happens to me is that my apache server doesn't permit the .htaccess modifications that the Patch adds.

Try comment this lines in the .htaccess file:

order allow,deny
deny from all
1
  • i already add this in my website .htaccess – SAAB Nov 4 '15 at 19:08
0

Have you whitelisted your cms blocks and variables as described in: "APPSEC-1057" SUPEE-6788. You can do this in system->permissions->{variables and blocks}

Also you can create an upgrade script that will take care of this:

/** @var  $installer Mage_Core_Model_Resource_Setup */
$installer = $this;
$installer->startSetup();

/*
 * Make sure the upgrade is not performed on installations without the tables
 * (i.e. unpatched shops).
 */
$adminVersion = Mage::getConfig()->getModuleConfig('Mage_Admin')->version;
if (version_compare($adminVersion, '1.6.1.2', '>=')) {

    $blockNames = array(
        'cms/block',
        'catalog/product_list',
        'page/html'
    );
    foreach ($blockNames as $blockName) {
        $whitelistBlock = Mage::getModel('admin/block')->load($blockName, 'block_name');
        $whitelistBlock->setData('block_name', $blockName);
        $whitelistBlock->setData('is_allowed', 1);
        $whitelistBlock->save();
    }

    $variableNames = array(
        'design/email/logo_alt',
        'design/email/logo_width',
        'design/email/logo_height',
    );

    foreach ($variableNames as $variableName) {
        $whitelistVar = Mage::getModel('admin/variable')->load($variableName, 'variable_name');
        $whitelistVar->setData('variable_name', $variableName);
        $whitelistVar->setData('is_allowed', 1);
        $whitelistVar->save();
    }
}

$installer->endSetup();
5
  • i apply this "APPSEC-1057" in my website but can please tell me which file i update this code – SAAB Nov 4 '15 at 15:24
  • if you are not sure how to use upgrade scripts then simply whitelist your blocks using magento admin panel: system->permissions->{variables and blocks} – lloiacono Nov 4 '15 at 16:03
  • i already implement this solution but still no results – SAAB Nov 4 '15 at 16:05
  • can you please tell me which file i update this code – SAAB Nov 4 '15 at 16:28
  • this script is doing the same that you are doing manually from the admin, so if you already did it manually there is no need to add the script. If you still want to do it, then put this into a data folder in one of your existing modules, I have no space to explain here so read this: inchoo.net/magento/… – lloiacono Nov 4 '15 at 17:09

Not the answer you're looking for? Browse other questions tagged or ask your own question.