6

This patch is incompatible with the PHP 7.2 support patch. Removing lines 1711 to 1761 allows to apply the patch. This patch tries to patch files that have been removed by the 7.2 support patch. Removing these lines should be safe.


4

On M1, specifically 1.9.2.1 w/ all previous patches applied. I got the following error: Hunk #1 FAILED at 483. 1 out of 1 hunk FAILED -- saving rejects to file js/tiny_mce/plugins/media/js/media.js.rej Removing the lines about that file from the patch file and manually applying that change worked for me when I re-applied the patch file. When I looked at ...


3

Magento 1.9.1.0. Patch was applied successfully. After adding a product to the cart and then logging in, the cart is empty again. I don't think the issue was there before and there seem to be changes made to app/code/core/Mage/Checkout/Model/Session.php


2

Magento 1.7.0.2 I'm getting: Hunk #1 succeeded at 113 with fuzz 2 (offset 4 lines). checking file js/tiny_mce/plugins/media/js/media.js checking file js/varien/js.js Hunk #1 succeeded at 707 (offset 5 lines). checking file lib/phpseclib/PHP/Compat/Function/array_fill.php checking file lib/phpseclib/PHP/Compat/Function/bcpowmod.php checking file lib/...


2

On M1, 1.9.1.0 with all previous patches applied, I get numerous errors: checking file app/Mage.php Hunk #1 FAILED at 813. 1 out of 1 hunk FAILED checking file app/code/core/Mage/Adminhtml/Block/Catalog/Product/Edit/Tab/Super/Config.php Hunk #1 FAILED at 155. 1 out of 1 hunk FAILED checking file app/code/core/Mage/Adminhtml/Model/LayoutUpdate/Validator....


2

HoneyPot for magento 2, test it on dev first please https://github.com/arcmedia/mage2-customer-honeypot


2

This is not a definitive list, but more a list of some things to consider. I'll go into more details on some of the suggestions below. I am probably missing some stuff and some may be enabled by default (recaptcha?). Overview Magento Security Scan Tool Audit ALL custom/third party modules Using restrictive filesystem permissions IP Restrictions on SSH/SFTP ...


1

Had the same issue as @Mat On M1, 1.9.1.0 with all previous patches applied, I get numerous errors: My line endings were not set to unix/macosx on the repo (another dev using Win-dows). used dos2unix to convert the necessary files and worked. And as @chaoticgeek, I have the: Hunk #1 FAILED at 483. 1 out of 1 hunk FAILED -- saving rejects to file js/...


1

I've been discussing under a separate question. The magento API is on and enabled by default. There is an option to lock some functionality down so that it does not allow anonymous acess. So check that setting. Otherwise may need to consider locking API down by IP. Although checkout needs access. https://devdocs.magento.com/guides/v2.3/rest/anonymous-api-...


Only top voted, non community-wiki answers of a minimum length are eligible