v2.5.1 of One-Page Checkout is now available for download: https://www.zen-cart.com/downloads.php?do=file&id=2095
This release contains changes associated with these GitHub issues:
#408: Correcting interaction with payment modules, like square_webPay, that perform the form's submittal.
#409: Correct misspelling of 'square_webPay' in configuration description.
#411: Ensure that all input fields are properly sanitized (security improvement)
Note: If you're running on v2.5.0, please apply this update for its security improvement! If running on a prior version, let me know the OPC version number and the Zen Cart version on which you're running; I'll supply the patch files within this thread.
First!
Zen Cart 1.5.6c/PHP 7.3/OPC 2.2.2.
That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.
Great news!
That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.
OK I have:
2.3.7
2.4.3
2.4.5
2.4.6
That Software Guy. My Store: Zen Cart Support
Available for hire - See my ad in Services
Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
Do you benefit from Zen Cart? Then please support the project.
... and that patch can be provided by the security update just posted here: https://www.zen-cart.com/showthread....-v1-5-8-series
how do i fix this?
[04-Apr-2024 12:45:42 UTC] Request URI: /ajax.php?act=ajaxOnePageCheckout&method=updatePaymentMethod, IP address: 207.68.237.174
#1 trigger_error() called at [/var/www/clients/client1/web3/web/includes/classes/order.php:334]
#2 order->cart() called at [/var/www/clients/client1/web3/web/includes/classes/order.php:38]
#3 order->__construct() called at [/var/www/clients/client1/web3/web/includes/classes/ajax/zcAjaxOnePageCheckout.php:519]
#4 zcAjaxOnePageCheckout->updatePaymentMethod() called at [/var/www/clients/client1/web3/web/ajax.php:85]
--> PHP Notice: Malformed value for session-based shipping module; customer will need to re-select: false in /var/www/clients/client1/web3/web/includes/classes/order.php on line 334.
zen version 5.6c and opc version 2.3.12 (2022-04-03)