Magento
Enable Magento Formkey Validation On Checkout (Fix Included)
Upon installing Magento security patch SUPEE-9767, you’ll be asked to enable the Magento formkey validation on checkout. A message will appear after refreshing cache following patch installation informing you of such. And displays at the top of the Magento admin panel. It reads, “Important: Formkey validation on checkout disabled. This may expose security risks. We strongly recommend to Enable Form Key Validation On Checkout in Admin / Security Section, for protect your own checkout process.” Before we enabled this feature we read up on it. And found out that if you use custom Magento theme files you will more than likely run into problems. For instance, the SUPEE-9767 patch will override the checkout base files to include formkey validation. However, if you have custom t...
Installing Magento Security Patch SUPEE-9767
Magento CE ver. 1.7.0.2 Recently we were asked by Worldpay to install the latest Magento security patch SUPEE-9767 for a client. The patch was released on May 31, 2017 and then updated with version 2 on July 12, 2017. If you have installed the original patch you will need to revert it prior to installing version 2. The patch provides protection against several types of security-related issues. Specifically, it protects against remote code execution, information leaks, and cross-site scripting. Download SUPEE-9767 Patch To download the SUPEE-9767 v2 security patch you’ll need to head on over to the Magento Tech Resources download page. From there you can access all the security patches released by Magento under the “Release Archive” tab. Scroll on down until you find the h...
Magento Solution to SUPEE-8788 and Product Review Form
Magento CE ver. 1.7.0.2 We recently had a client contact us to let us know their product reviews weren’t working after the Magento security patches were applied. There were actually two issues at hand here. For one, the product review form was not working when customers were submitting reviews. As nothing would come through on the backend. And two, the Magento Product Review Follow-up Emails extension by TRM Marketing stopped sending out emails. In this article, we will be discussing the issue with the customer reviews not showing up in the backend of Magento for approval. Therefore, losing a client’s product review entirely. SUPEE-8788 And Product Review Form We took a quick look to find out what was going on with the product review form on the product pages of our client’s st...
Solved: Magento Product Review Follow-up Emails Stopped Working After SUPEE-6788 Installed
Magento ver. 1.7.0.2 We recently had a client contact us to let us know their product reviews weren’t working after the Magento security patches were applied. There were actually two issues at hand here. For one, the product review form was not working when customers were submitting reviews. As nothing would come through on the backend. And two, the Magento Product Review Follow-up Emails extension by TRM Marketing stopped sending out emails. In this article, we will be discussing the issue with the extension not working. After looking at the Magento Admin Panel => Reports => Follow-up Review Email Queue we found that the email queue had not been processed since the latest SUPEE-6788 security patch was applied. The scheduled “Send Time” column was showing dates that had a...
Magento 2.0 Required PHP Extenstions
This tutorial will take you through the steps on how to check what PHP extensions are installed on your server to meet PHP extension requirements for Magento 2.0. First you will need to login to putty; it does not matter if you login as a root user or not. After you have logged in type “php -m” and hit the enter key. A list of PHP modules (extensions) that are installed on your server will appear. Compare the list to Magento’s 2.0 Required PHP Extensions list. In my case scenario we are missing the extension mhash but come to find out that mhash is obsoleted by hash. So hash has replaced mhash which means we have all of the required PHP extensions for Magento 2.0. Required PHP extensions: bc-math (enterprise edition only) curl gd, ImageMagick 6.3.7 (or later) or both ...
Upgrade PHP For Magento 2.0 Installation
Magento 2.0 Community Edition (CE) Prerequisites: Apache version: 2.2 or 2.4 PHP verson: 5.5.22 or later (7.0.2–7.0.4 supported by Magento version 2.0.1 and later only) PHP Extensions: curl, gd OR ImageMagick 6.3.7 (or later), intl, mbstring, mcrypt, mhash, opcache (not required; highly recommended), openssl, PDO/MySQL, SimpleXML, soap, xml, xsl, zip, json (PHP 7 only), iconv (PHP 7 only) Prerequisite Check: Apache version: 2.2.24 PHP version: 5.3.27 Hosting: Inmotion Hosting VPS Server Magento Software: 1.8.1.0 In this case scenario we have PHP version 5.3.27 installed so we will need to upgrade our VPS server’s version of PHP using EasyApache to PHP version 5.5.22 or later. We located InMotion Hosting’s Upgrade PHP using EasyApache support center article to assist us. We ha...
