Sensei
- Join Date:
- Jan 2004
- Posts:
- 63,511
- Plugin Contributions:
- 176
v1.3.7.1 -- Bundle of v1.3.7 and several patches
A bundled patch for v1.3.7 has been released for the sake of convenience for those doing new installs.
You DO NOT need to upgrade v1.3.7 to v1.3.7.1 if you have already installed the released patches or do not need the benefits provided from the list of fixes below:
- XSS vulnerability fix April 2007
- Admin security fix June 2007
- USPS patch for May 2007
- Resource allocation problems caused by missing dir->close() function calls
- PHPMailer vulnerability patch
- Payment Method footer problems in order-confirmation emails (order class)
- PayPal patches for IPN and Express Checkout -- ie: June 17/07 patch contents included
- Shipping Estimator display glitch (previously included in PayPal patch)
- $this_is_home_page in tpl_main_page.php
Download is available from SourceForge as usual.
zen-cart-v1.3.7.1-full-patched-07052007.zip
Upgrade Questions
If you do not already have the listed patches installed, you have 3 options:
a) do nothing (not advisable)
b) apply the patches manually
c) do a full upgrade using the v1.3.7.1 fileset.
Also note: Upgrading to v1.3.7.1 does not require any database changes. Only the php files are affected.
For folks planning to do new installs, the v1.3.7.1 full patch fileset is the recommended starting point.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.