The POODLE fixes

[kelly60]

I did all the POODLE fixes recommended on this forum but there is one file that is in the list of files to fix that does not have the curlopt_sslversion 3 line as indicated.

My /modules/payment/papaldp.php file looks like this:

// create a new cURL resource and set params
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_POST,1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "cmpi_msg=".urlencode($data));
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_TIMEOUT, 8);

...there is no line that has CURLOPT_SSLVERSION that is recommended that I uncomment or do I fix one of these other lines?

I currently have zencart version 1.5.1 only because I have never upgraded before and am scared I will mess things up, but I also can not afford to hire someone to do it for me.

[lat9]

The paypaldp.php payment method for Zen Cart v1.5.1 does not include a CURLOPT_SSLVERSION setting; the version for Zen Cart v1.5.3, on the other hand, does.