Questions tagged [supee-6788]
SUPEE-6788 is a security patch released for Magento CE <= 1.9.2.1 / EE <= 1.14.2.1
100 questions
7
votes
3
answers
3k
views
PHP Fatal error: Call to a member function setData() on a non-object in Permissions/BlockController.php on line 113 - After Applying SUPEE-6788
PHP Fatal error After Applying SUPEE-6788:
Call to a member function setData() on a non-object in
app/code/core/Mage/Adminhtml/controllers/Permissions/BlockController.php
on line 113
First I ...
1
vote
2
answers
102
views
Ensuring the patch was completed successfully
I have struggled to apply this patch for a few days now. Yesterday was the closest I have come to completing the patch. I still get the notice "ERROR: Patch can't be applied/reverted successfully."
...
- 23
2
votes
1
answer
496
views
Magento 1.7.0.2 patch SUPEE-6788 fails
I am trying to patch a Magento 1.7.0.2 with the
PATCH_SUPEE-6788_CE_1.7.0.2_v1-2015-10-27-12-00-16.sh
I have solved several line ending problems and missing .htaccess.sample ...
But these file ...
- 21
0
votes
1
answer
434
views
GTSpeed SUPEE 6788 - Admin Route
I've read through a lot of the posts about 404s after installing SUPEE 6788 and really have tried to replicate the steps for this extension (GTSpeed) but I have been unable to action the correct steps ...
- 394
2
votes
1
answer
883
views
Fix module routes manually after installing PATCH SUPEE 6788 + toolbox fix
After running https://github.com/rhoerr/supee-6788-toolbox fix for patch supee 6788 some routes still go to 404 page.
The fixSUPEE6788.log says for those cases "Admin routes for the module will have ...
- 109
5
votes
1
answer
2k
views
Fatal error: Call to a member function setArea() on a non-object in /home/hoods/public_html/app/code/core/Mage/Adminhtml/Controller/Action.php
Our website theme has been having issues with the Magento Patch 6788. The theme developers sent me their patch this morning and I went ahead and copied over the files that they provided for me. Now ...
0
votes
1
answer
45
views
SUPEE 6788 - What do I need to do with overrides
Looking at the actually .sh patch I can see it updates files such as
/app/design/frontend/base/default/template/customer/form/register.phtml
I have my overridden the .phtml with my own in my theme ...
- 2,641
1
vote
1
answer
81
views
Fixing a module with incorrect namespacing for Patch 6788
I am trying to fix the admin route issue for a 3rd party module, as required for patch 6788.
The module code sits in a directory directly below 'community' rather than in a namespace directory
i.e
...
- 1,014
0
votes
1
answer
362
views
SUPEE 6788 + Mage_Adminhtml_Permissions_BlockController + Controller file was loaded but class does not exist
My magento specifications are below:
Magento 1.9.0.1
PHP 5.3.3
centos 6.6 (final)
I applied patch 6788 which was applied successfully without any errors.
When I visit the new admin pages (block ...
- 11
0
votes
3
answers
347
views
Patch SUPEE-6788 with Magento 1.8.1.0
There is an issue with the current patch (SUPEE-6788) for Magento 1.8.1.0.
When I try to apply the patch I get the error of:
patching file app/code/core/Mage/Core/Controller/Varien/Router/Admin.php
...
- 15
2
votes
1
answer
140
views
Multiple route errors after installing PATCH_SUPEE-6788_EE
I've recently installed the latest security patch for Enterprise Edition 1.14.2.0.
Some routes get stuck. EG: "add customer" in the admin leads to a blank page (http://local.edressme.com/edressme/...
- 109
1
vote
1
answer
110
views
How do I know security patch - 6788 applied or not?
I'm new to applying Magento Security Patch. So here
Initially I have applied PATCH_SUPEE-6482_EE_1.13.1.0_v2.sh patch for which I'm getting applied.patches.list file in app/etc/.
And the applied....
- 191
0
votes
2
answers
132
views
Magento 1.9.1 when i update Patch SUPEE 6788 then cannot see products in static block [duplicate]
Magento 1.9.1 when i update Patch SUPEE 6788 then cannot see products in static block but text appear in static block please tell me what should i do
- 21
1
vote
2
answers
244
views
SUPEE-6788 APPSEC-1063 Issue
SUPEE-6788 Technical details says that APPSEC-1063 issues should be resolved following way:
$collection->addFieldToFilter('(field1-field2)', array('eq'=>3));
Should be changed to:
$expression ...
- 568
2
votes
3
answers
5k
views
Patch SUPEE-6788 - Error after applying this patch to 1.9.1.0
Most of the site works fine after applying this patch. One exception is that when going to admin->system->cache management->refresh cache, I got the following error. It was just an one-time error. I ...
- 431
0
votes
1
answer
215
views
Supee 6788 isn't installed after upgrading to Magento 1.9.2.2
I did the upgrading to Magento 1.9.2.2 with Magento Connect but after doing that still appear the message "October 27, 2015: New Magento Security Patch (SUPEE-6788) – Install Immediately".
It's ...
- 219
1
vote
2
answers
656
views
SUPEE-6788 - Patching file notice, but file not patched
SUPEE-6788 - Patching file notice, but file not patched
We read:
patching file app/design/frontend/base/default/template/persistent/customer/form/register.phtml
and then when we check the files the ...
- 5,452
7
votes
2
answers
3k
views
Admin routing compatibility mode for extensions: Enable or Disable?
I have just updatet my store to the latest Magento CE 1.9.2.2 software version (not the Patch SUPEE-6788, I did the full core update using the Magento Downloader).
After the update I went to
System &...
- 3,622
0
votes
1
answer
206
views
Magento SUPEE-6788 Breaks email body in all email templates
When I enable this security patch, all emails sent have no body. When I look at the email header I see this inside all of them dkim=neutral (body hash did not verify)
I have an exception log:
http://...
- 103
0
votes
2
answers
313
views
Applying SUPEE-6788, it removes static block
Today I applied patch SUPEE-6788, and I noticed that the static block on my home page disappeared.
I have checked in admin side, i have used {{block type="catalog/product_list" category_id="10".. and ...
- 1
2
votes
1
answer
3k
views
After applying SUPEE-6788 , cron stopped working
I am using 1.9.2.1.
After applying SUPEE-6788 , cron stopped working.
Why??
I attached the cron setting of my system.
user9839
2
votes
2
answers
344
views
when apply SUPEE-6788 my home page goes blank
When I apply PATCH_SUPEE-6788_CE_1.9.0.0_v1-2015-10-26-11-59-04.sh
in my magento 1.9.0.0 my home page goes blank.
My 1column.phtml shows on frontend:
<div class="main container show-bg">
...
- 47
2
votes
2
answers
5k
views
404 Error Page not found error on extension admin route update Installing SUPEE - 6788
I have installed supee 6788 patch in my store. I have several extensions in my store.
I have just updated admin route as per magento APPSEC-1034, addressing bypassing custom admin URL but it gives me ...
- 756
4
votes
1
answer
365
views
SUPEE6788 APPSEC-1063 SQL Injection
I've been looking around and haven't found any definitive heuristics to detect whether or not a code-base is affected, so I've resorted to performing a recursive file scan that matches a list of ...
- 442
1
vote
0
answers
56
views
Is there anything we need to do for APPSEC-1079 SUPEE 6788? [duplicate]
There is 4th SUPEE 6788 security notice :
APPSEC-1079, addressing potential exploit with custom option file type
"This change will affect any customization that uses product custom
options to ...
- 863
2
votes
1
answer
183
views
SUPEE-6788 - Module Upgrades
following on from the release of the SUPEE-6788 patch I was wondering what the advised process is for those modules which have not yet been patched or updated but are vital for customer interaction &...
- 123
3
votes
1
answer
301
views
SUPEE6788 and SQL statements in addFieldToFilter
At SUPEE-6788 Technical Details the Magento people give examples about how to fix Magento modules. Anyway, I have some places I found after install the SUPEE6788 patch that isn't explained in examples ...
- 819
5
votes
4
answers
4k
views
Magento 1.9.1.0 patch SUPEE-6788 1 out of 1 hunk ignored missing .htaccess.sample
I am using Magento 1.9.1.0 and tried to install the new patch SUPEE-6788 through SSH but getting ERROR below. I am not able to understand what's wrong and where exactly the error lies
I have ...
- 105
2
votes
1
answer
2k
views
Added block to whitelist, but blocks still not showing (6788)
I also have a problem with custom blocks on my home page CMS after 6788. The CMS page uses a slider, which is on the backwards incompatible list because of the old router config. I used supee-6788-...
- 762
2
votes
2
answers
1k
views
Magento 1.9.0.1 + Patch SUPEE-6788 breaks custom theme
I have tried to apply the new patch SUPEE-6788 on my website which was successful without any errors.
After that I recompiled Magento using Configuration > tools > compilation. After doing that my ...
- 23
0
votes
0
answers
542
views
Change admin routers after supee 6788
I have a module where the admin does not work:
I had it like this:
<admin>
<routers>
<custommenu>
<use>admin</use>
&...
- 6,287
0
votes
1
answer
926
views
Have problem to display blocks after applied SUPEE-6788 ,
After I applied the security patch SUPEE-6788 , some of the "non-static" blocks( like newsletter signup form and blocks that call functions) disappeared and I have tried empty cache many times. Anyone ...
- 125
6
votes
2
answers
7k
views
After applying SUPEE-6788 can't create customer
After installing the patch, customers are unable to register accounts.
- 1,543
3
votes
1
answer
3k
views
Tables permission_block and permission_variable did not get created after SUPEE-6788
I installed the patch SUPEE-6788 on my local website and everything went fine. I uploaded all modified files to our production website but tables permission_block and permission_variable did not get ...
- 53
1
vote
2
answers
1k
views
Patch SUPEE-6788 and catalog/navigation blocks
I applied the patch SUPEE-6788 from 1.9.2.1 and had a issue with a catalog/navigation block type.
I have this in a CMS static block:
{{block type="catalog/navigation" name="categoryLandingPage" ...
- 11
2
votes
1
answer
9k
views
SUPEE-6788 Patch can't be applied/reverted successfully
I'm trying to patch my local Magento website for the SUPEE 6788 patch but I'm receiving some errors when running the .sh file via Git Bash:
NETWORK+Liam.McArthur@NETWORK MINGW32 /c/xampp/htdocs/...
- 1,319
1
vote
1
answer
591
views
Problems installing SUPEE-6788 patch on 1.9.2.1
Having issues while installing the SUPEE 6788 patch.
First issue was I was using a custom edited .htaccess file. I've now replaced with the stock version for 1.9.2.1 but still getting errors as seen ...
- 31
34
votes
3
answers
23k
views
How to update admin routers of custom module for patch SUPEE-6788
I'm not sure how to update custom modules to work with the SUPEE-6788 patch, the instructions are not very clear.
Based on Alan Storm's tutorial, I created a simple module in the generator www....
- 2,192
2
votes
2
answers
2k
views
Fixing extensions for SUPEE-6788
I have updated Magento to 1.9.2.2 via Connect Manager in my dev environment and so far I can't say that I am noticing any bugs related to the various changes outlined here: http://magento.com/security/...
- 722
1
vote
1
answer
740
views
Page not found in admin panel after applying patch 6788 and editing config.xml
After installing the patch I tried to change the config.xml of the extension. The extension has two config.xml files. In below you can find the revision I made, but still I get page not found error.
&...
- 2,079
3
votes
1
answer
5k
views
Magento supee 6788 on 1.9.1.1, error applying patch
I've got the following error while applying the patch on 1.9.1.1:
1 out of 1 hunk FAILED -- saving rejects to file app/code/core/Mage/Core/Controller/Varien/Router/Admin.php.rej
I've doubled checked ...
- 6,287
1
vote
1
answer
98
views
I could not see the pages which I had created using CMS after Updating the security Patch
I had installed latest security patch of SUPEE-6788 after installing this security patch.I could not see the before created CMS pages in frontend.It is showing the URL but it is not showing the data ...
- 525
6
votes
4
answers
1k
views
Does Magento 1.4.1.1 require patch SUPEE-6788?
I am using Magento 1.4.1.1 and I received a message:
"New Magento Security Patch (SUPEE-6788) – Install Immediately"
but I could not find patch SUPEE-6788 for Magento 1.4.1.1.
Is it required to ...
6
votes
1
answer
2k
views
Tables permission_block and permission_variable not created after SUPEE-6788
After applying the Magento patch SUPEE-6788, I find that the tables permission_block and permission_variable are not created in the database. How should I start investigate this problem? (The Magento ...
0
votes
2
answers
1k
views
SUPEE-6788 Yields htaccess issue
The first time I ran the patch, I got
patching file .htaccess Hunk #1 FAILED at 207. It was the only file that had an issue. All the rest patched successfully.
I replaced with the stock ....
- 131
21
votes
5
answers
15k
views
Why does PATCH_SUPEE-6788 appear to have no effect on a 1.7.0.2 installation?
Note: This issue appears to apply to all versions of Magento which received the SUPEE-6788 patch. You'll see in my answer that both .htaccess and .htaccess.sample need to be restored for the patch ...
- 2,047
29
votes
4
answers
3k
views
New patch supee-6788 how to apply patch
After weeks of waiting for the patch today (27.10.2015) it was released: SUPEE-6788
A lot of things were patched and also is encouraged to review installed modules for possible vulnerabilities.
I ...
- 3,386
46
votes
3
answers
14k
views
APPSEC-1057 How to add variables or blocks to the white list tables
APPSEC-1057 (part of SUPEE-6788) states
Magento now includes a whitelist of allowed blocks or directives. If a module or anyone uses variables like {{config path=”web/unsecure/base_url”}} and
{{...
- 5,980
0
votes
2
answers
480
views
Magento Admin Controller Issue
On October 22, 2015, Magento will release security patch SUPEE-6788. According to the technical details, 4 APPSEC's that have been fixed require some rework in local and community modules. I'm trying ...
- 745
71
votes
5
answers
18k
views
How to check which modules are affected by security patch SUPEE-6788
On October 27, 2015, Magento has released security patch SUPEE-6788. According to the technical details, 4 APPSEC's that have been fixed require some rework in local and community modules:
APPSEC-...
- 1,911