Zen Cart Logo
Forums / Reports of Security Problems / possible issue with Nov 30 patch for zc1.3.8

possible issue with Nov 30 patch for zc1.3.8

Locked

Views: 11

Results 1 to 2 of 2
This thread is locked. New replies are disabled.
16 Dec 2009, 19:32
#1
newagekat avatar

newagekat

Zen Follower

Join Date:
Nov 2005
Location:
Vancouver, Canada
Posts:
151
Plugin Contributions:
0

possible issue with Nov 30 patch for zc1.3.8

Hello:

I apologize in advance if this is the wrong place to pose this questions.

One of my long standing clients is experiencing an issue with order status changes. When he changes the order status to complete, that status is no longer reflected on admin home page under new orders.

I'm not sure if this is related to the patches I've applied, but it seems to have started after the implementation of the following patches:

Added XSS protection patch dated Nov 30/09
{ http://www.zen-cart.com/forum/showthread.php?t=142927}
Removed unused folders per security patch dated Nov 28/09
( http://www.zen-cart.com/forum/showthread.php?t=142784)
security_patch_v138_20090619

This is a highly customized website running on zc1.3.8 with following addons:
Admin Profiles 1.0.7
Column Layout Grid 1.3.8
Shopping totals in header v1.0
How did You hear 1.3.8.a
Ultimate SEO 2.106

thank you for your help.

kp

18 Dec 2009, 02:35
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: possible issue with Nov 30 patch for zc1.3.8

newagekat:

security_patch_v138_20090619
The inability to change settings in the admin is most likely due to improperly applying the June 2009 Admin Security Patch.
Most commonly people seem to ignore two important things:
a) ALL the updates are related to files under the /admin/ folder. Don't put them under the non-admin folders.
b) the html_output.php file (admin version) has important updates. If you choose to skip updating the admin version of that file, you will have problems.