Magento

Spam Russian Customer Accounts This week I was called about some spam Russian customer accounts all the sudden appearing in my client’s Magento backend. The first and last name fields were filled with Russian text along with “mostly” Russian email addresses. A Google pop-up was coming up asking to translate the page from the Russian language to English. The spambots were even getting past the Captcha. I was able to quickly fix the problem. And in this article, I will show you how to stop and remove the unwanted spam Russian accounts from Magento. Here is an example of what was showing up in the Magento customer module as the first name and last name of the spam accounts: How to stop the Russian Customer Accounts The easiest and quickest way to stop these spam accounts fro...

Upon installing Magento security patch SUPEE-9767, you’ll be asked to enable the Magento formkey validation on checkout. A message will appear after refreshing cache following patch installation informing you of such. And displays at the top of the Magento admin panel. It reads, “Important: Formkey validation on checkout disabled. This may expose security risks. We strongly recommend to Enable Form Key Validation On Checkout in Admin / Security Section, for protect your own checkout process.” Before we enabled this feature we read up on it. And found out that if you use custom Magento theme files you will more than likely run into problems. For instance, the SUPEE-9767 patch will override the checkout base files to include formkey validation. However, if you have custom t...

Magento CE ver. 1.7.0.2 Recently we were asked by Worldpay to install the latest Magento security patch SUPEE-9767 for a client. The patch was released on May 31, 2017 and then updated with version 2 on July 12, 2017. If you have installed the original patch you will need to revert it prior to installing version 2. The patch provides protection against several types of security-related issues. Specifically, it protects against remote code execution, information leaks, and cross-site scripting. Download SUPEE-9767 Patch To download the SUPEE-9767 v2 security patch you’ll need to head on over to the Magento Tech Resources download page. From there you can access all the security patches released by Magento under the “Release Archive” tab. Scroll on down until you find the h...

Magento CE ver. 1.7.0.2 We recently had a client contact us to let us know their product reviews weren’t working after the Magento security patches were applied. There were actually two issues at hand here. For one, the product review form was not working when customers were submitting reviews. As nothing would come through on the backend. And two, the Magento Product Review Follow-up Emails extension by TRM Marketing stopped sending out emails. In this article, we will be discussing the issue with the customer reviews not showing up in the backend of Magento for approval. Therefore, losing a client’s product review entirely. SUPEE-8788 And Product Review Form We took a quick look to find out what was going on with the product review form on the product pages of our client’s st...

Magento ver. 1.7.0.2 We recently had a client contact us to let us know their product reviews weren’t working after the Magento security patches were applied. There were actually two issues at hand here. For one, the product review form was not working when customers were submitting reviews. As nothing would come through on the backend. And two, the Magento Product Review Follow-up Emails extension by TRM Marketing stopped sending out emails. In this article, we will be discussing the issue with the extension not working. After looking at the Magento Admin Panel => Reports => Follow-up Review Email Queue we found that the email queue had not been processed since the latest SUPEE-6788 security patch was applied. The scheduled “Send Time” column was showing dates that had a...

This tutorial will take you through the steps on how to check what PHP extensions are installed on your server to meet PHP extension requirements for Magento 2.0. First you will need to login to putty; it does not matter if you login as a root user or not. After you have logged in type “php -m” and hit the enter key. A list of PHP modules (extensions) that are installed on your server will appear. Compare the list to Magento’s 2.0 Required PHP Extensions list. In my case scenario we are missing the extension mhash but come to find out that mhash is obsoleted by hash. So hash has replaced mhash which means we have all of the required PHP extensions for Magento 2.0. Required PHP extensions:  bc-math (enterprise edition only)  curl  gd, ImageMagick 6.3.7 (or later) or both  ...

Magento 2.0 Community Edition (CE) Prerequisites: Apache version: 2.2 or 2.4 PHP verson: 5.5.22 or later (7.0.2–7.0.4 supported by Magento version 2.0.1 and later only) PHP Extensions: curl, gd OR ImageMagick 6.3.7 (or later), intl, mbstring, mcrypt, mhash, opcache (not required; highly recommended), openssl, PDO/MySQL, SimpleXML, soap, xml, xsl, zip, json (PHP 7 only), iconv (PHP 7 only) Prerequisite Check:  Apache version: 2.2.24  PHP version: 5.3.27 Hosting: Inmotion Hosting VPS Server Magento Software: 1.8.1.0 In this case scenario we have PHP version 5.3.27 installed so we will need to upgrade our VPS server’s version of PHP using EasyApache to PHP version 5.5.22 or later. We located InMotion Hosting’s Upgrade PHP using EasyApache support center article to assist us. We ha...