Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 7863

Questions about the official Magento Security patches (SUPEE-xxxx)

1 vote
Accepted

Security update for Magento Open Source APSB22-12 Which version?

Magento 2 can be installed in two ways : Github installation or Composer based Installation A Github installation is usually used by developers who are contributing to the Magento codebase and is a cl …
paj's user avatar
  • 5,980
3 votes
Accepted

SUPEE-9767 - Which symlinks are bad?

When we talk about symlinks and Magento we are referring to any symlinked Magento files (especially template files) that are included as part of the php compilation and execution process. If you read …
paj's user avatar
  • 5,980
0 votes

Magento 1.9 : Magereport warning 7405 not installed

If you upgraded with patches then you can find the applied patches file applied.patches.list in the app/etc/ directory. When patches are applied this file is automatically updated. … Check if the 7405 patch appears in the applied patches list. …
paj's user avatar
  • 5,980
0 votes

magento 1.9.3.4 and patch 9767v2 issue

Check how you have added the formkey in payment.phtml, the formkey should be outside of the fieldset element, but within the form element like this <form action="" id="co-payment-form"> <fieldset …
paj's user avatar
  • 5,980
1 vote

Incorrect SUPEE-8167 patch name

I have seen CE patches with an EE prefix applied to CE shops before and assumed they were just identical patches, but I am not sure in this case. …
paj's user avatar
  • 5,980
3 votes
Accepted

New Patch for PayPal Instant Payment Notification (IPN) Changes. Upgrade to 1.9.3.3 or SUPEE...

You need to click the release archive tab at https://magento.com/tech-resources/download Scroll down to the bottom of the page for the CE 1.x patches and CE 1.9.3.3 source code downloads. … Apply the patches for CE 1.x as per the Magento documentation here http://devdocs.magento.com/guides/m1x/other/ht_install-patches.html …
paj's user avatar
  • 5,980
11 votes

Security Patch SUPEE-9767 - Possible issues?

Issue: Dynamic code or css disables form key input element at checkout An issue I have seen is where dynamic code (paypal plus) in the one page checkout process overwrites the fieldset element in the …
paj's user avatar
  • 5,980
11 votes

Security Patch SUPEE-9767 - Possible issues?

Note that Symlinks have always been disabled by default on new Magento installations admin YES/NO config values default to 'NO'. The update now explicitly disables symlinks in config.xml and as an ext …
paj's user avatar
  • 5,980
46 votes
3 answers
14k views

APPSEC-1057 How to add variables or blocks to the white list tables

APPSEC-1057 (part of SUPEE-6788) states Magento now includes a whitelist of allowed blocks or directives. If a module or anyone uses variables like {{config path=”web/unsecure/base_url”}} and {{ …
5 votes

How to check which modules are affected by security patch SUPEE-6788

This php script might be useful in identifying Magento code affected by the proposed SUPEE-6788 patch. This is in no way a foolproof security check for this patch, but might be useful to quickly scan …
paj's user avatar
  • 5,980