Forums / General Questions / How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

Locked

Started by hcd888 on 1 Jul 2009, 10:59 AM · Views: 20,411

Results 1 to 16 of 16
This thread is locked. New replies are disabled.
1 Jul 2009, 10:59 AM
#1
hcd888 avatar

hcd888

Zen Follower

Join Date:
May 2008
Posts:
348
Plugin Contributions:
0

How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

Hi, when i log in to my admin area it is still showing the message "New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch "

I've installed the patch but it still showing the message. Do i need to change the "Admin" folder and log in url?

Because iam a newbie iam really nervous & scared of start messing around with folders :no:

1 Jul 2009, 11:24 AM
#2
stevesh avatar

stevesh

Black Belt

Join Date:
Feb 2005
Location:
Lansing, Michigan USA
Posts:
19,793
Plugin Contributions:
2

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

I believe you do need to change the name of the admin folder to prevent that message from appearing, but you want to do that anyway, for security reasons. It's really pretty simple:

Change the name of the 'admin' folder.

Open **admin/includes/configure.php **and change the three (3) places where it says 'admin' to the new name of your folder.

Save the configure.php back to admin/includes, overwriting the existing file.

1 Jul 2009, 2:13 PM
#3
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

The security patch ZIP file was updated a couple times. Perhaps you got an earlier edition of the file that didn't contain the updates.
It's easy to fix that:
a) clear the browser's "temporary files"
b) re-download the patch zip file
c) unzip
d) apply the patch as if it was the first time you were doing it.
There's only a few files in it to deal with, so will only take a couple minutes.

Renaming your Admin is still very important, but is unrelated to the version number message.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

1 Jul 2009, 6:11 PM
#4
hcd888 avatar

hcd888

Zen Follower

Join Date:
May 2008
Posts:
348
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

Could i just install the security patch & leave the Admin Folder, or do i have to rename admin to get rid of the message "New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch "

1 Jul 2009, 6:23 PM
#5
tony_sar avatar

tony_sar

Totally Zenned

Join Date:
Jul 2006
Location:
Montreal, Canada
Posts:
2,276
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

as DrByte mentioned. renaming your admin folder is unrelated to version / update message you get in your admin. download the patch again as this one has been updated to also deal with version message and reapply the patch . :smile:

1 Jul 2009, 8:04 PM
#6
hcd888 avatar

hcd888

Zen Follower

Join Date:
May 2008
Posts:
348
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

Thanks for everyone who got back to me. Thanks

1 Jul 2009, 10:25 PM
#7
aly22 avatar

aly22

Zen Follower

Join Date:
Feb 2008
Posts:
174
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

I installed the patch on June 22nd, renamed admin directory today (july 1) and am still getting the new patch message. Patch is current version per security thread. Do I still need to reinstall?

1 Jul 2009, 10:28 PM
#8
tony_sar avatar

tony_sar

Totally Zenned

Join Date:
Jul 2006
Location:
Montreal, Canada
Posts:
2,276
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

patch released on 22nd was updated recently , you need to download and reinstall patch again .

1 Jul 2009, 10:35 PM
#9
aly22 avatar

aly22

Zen Follower

Join Date:
Feb 2008
Posts:
174
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

Will do, thanks. But very confusing in the security thread! The file should be renamed as when I tried to re-download it said I already had it. Shouldn't there be version numbers? I got email but figured I'd already done it.

2 Jul 2009, 8:44 AM
#10
hcd888 avatar

hcd888

Zen Follower

Join Date:
May 2008
Posts:
348
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

I installed the update and have got rid of the message in the admin area.

But in the admin area when i click on "Online Catalog" its displaying a blank page. How can i resole this.

Iam building the site now, and i have a index.html under construction page on my main page. But in the past when iam in the admin area i can click on "Online Catalog" and it will show me the site.

Now when i click on "Online Catalog" it just gives me a blank page, how can this be resolved, or how can i remove the security patch. So, that i can install it when i finished the site.

I tried deleting all files from security patch, but then website dosent work, so ive re-installed the patch again.

Please help. Thanks

2 Jul 2009, 9:04 AM
#11
tony_sar avatar

tony_sar

Totally Zenned

Join Date:
Jul 2006
Location:
Montreal, Canada
Posts:
2,276
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

there is only one CORE file that has been modified .. html_output.php , you can identify all patch files and remove them , and replace html_output.php either with new file , or simply remove the extra code that was added to this file .. you can find that information in read me section of patch .

before doing so , download and install Debug utility , follow instruction on how to use it . this tool will generate a error log , pointing at problem file or files that causing blank page. post back the error if you can not figure how to fix it . https://www.zen-cart.com/tutorials/index.php?article=82

18 Aug 2009, 11:38 PM
#12
castlebuilder avatar

castlebuilder

New Zenner

Join Date:
Aug 2009
Location:
NYC
Posts:
3
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

I have downloaded and installed the patch, there only seems to be one version available, but after unzipping it looks like it includes at least one file that was updated July 25. I have tried reinstalling a couple of times, I have changed my admin folder, etc. I still get the message "New Version Available v1.3.8a :: Important Security Patch" and the "Download Here" link leads me to the exact same file I already patched. So I try again... Still see that message! How do I make it go away? Again, I have installed and reinstalled the patch files multiple times.

19 Aug 2009, 12:35 AM
#13
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

What version of Zen Cart are you using? The message will not go away if you're not using v1.3.8a and the security patch. If you have an older version installed then ... well ... the message is correct.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

25 Aug 2009, 7:32 PM
#14
joanneomr avatar

joanneomr

New Zenner

Join Date:
Aug 2009
Posts:
1
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

One of the problems I ran into which made the red error message stay on top and which made my online catalog page become blank is that I installed the patch files into INCLUDES, not ADMIN>INCLUDES.

The file names are all the same, so it's an easy mistake to make. It was when I moved the output.php that the catalog page went blank.

So make sure you're copying the files into the include directory in your ADMIN directory (or whatever directory you changed admin to).

Now I get my catalog page and the red error message goes away.

2 Oct 2009, 10:43 AM
#15
ashlynmm avatar

ashlynmm

New Zenner

Join Date:
Oct 2009
Posts:
2
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

Have installed the patch.. only 5 minutes ago. It's telling me this at the top of admin (now renamed to something other than admin)

New Version Available v1.3.8a :: Important Security Patch
Download Here

link = http://www.zen-cart.com/forum/showthread.php?t=130161

I have downloaded and installed this patch twice in the last half hour, with no luck on removing the message.

Could it be something else that I've missed?

2 Oct 2009, 10:45 AM
#16
ashlynmm avatar

ashlynmm

New Zenner

Join Date:
Oct 2009
Posts:
2
Plugin Contributions:
0

Re: How to get of New PATCH Available: v1.3.8a - patch: [1] :: Important Security Patch

You just answered my question...
Glad I read upwards on the page..

Off to update from 1.3.7 now.

Thanks