Zen Cart Logo
Forums / General Questions / The POODLE fixes

The POODLE fixes

Views: 799

Results 1 to 2 of 2
29 Oct 2014, 5:11 PM
#1
kelly60 avatar

kelly60

New Zenner

Join Date:
Feb 2014
Location:
southern Oregon
Posts:
21
Plugin Contributions:
0

The POODLE fixes

I did all the POODLE fixes recommended on this forum but there is one file that is in the list of files to fix that does not have the curlopt_sslversion 3 line as indicated.

My /modules/payment/papaldp.php file looks like this:

// create a new cURL resource and set params
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_POST,1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "cmpi_msg=".urlencode($data));
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_TIMEOUT, 8);

...there is no line that has CURLOPT_SSLVERSION that is recommended that I uncomment or do I fix one of these other lines?

I currently have zencart version 1.5.1 only because I have never upgraded before and am scared I will mess things up, but I also can not afford to hire someone to do it for me.:unsure:

29 Oct 2014, 5:13 PM
#2
lat9 avatar

lat9

Administrator

Join Date:
Sep 2009
Location:
Stuart, FL
Posts:
14,097
Plugin Contributions:
56

Re: The POODLE fixes

The paypaldp.php payment method for Zen Cart v1.5.1 does not include a CURLOPT_SSLVERSION setting; the version for Zen Cart v1.5.3, on the other hand, does.