SUPEE-10415 a newly launched Magento’s security patch which enhances the security of Magento Commerce 1.14.3.7 and Open Source 1.9.3.7. It enriches the DoS (Denial-of-Service), Cross-site Request Forgery (CSRF) and RCE (Remote Code Execution) vulnerabilities. For initial customers who face issues while patching which occurred by SOAP v1 interactions in WSDL, these patches contain a fix which resolves those issues too. In the below article, you will find two ways of installing the SUPEE-10415. You can install it in both the cases i.e, in the presence of SSH as well as without SSH.The process of installing SUPEE-10415 With SSH is simple enough. Consider the below mention steps but make sure you disable the Magento’s compiler.
- Magento Version Verification
$ grep -A6 'static function getVersionInfo' app/Mage.php
public static function getVersionInfo()
{
return array(
'major' => '1',
'minor' => '9',
'revision' => '2',
'patch' => '4',
- Download The Related Patch
Be sure about your Magento’s version and then proceed with the downloading process.
- Keep The Downloaded Patch File Under Root Directory
It is necessary to place the downloaded patch file directly into the root directory as to execute them at the same place.
PATCH_SUPEE-10415_CE_1.9.2.4_v1-2017-11-27-06-51-32.sh app cron.php downloader errors favicon.ico index.php js lib mage media pkginfo robots.txt shell skin var
- Time To Execute The Patches
$ bash ./PATCH_SUPEE-10415_CE_1.9.2.4_v1-2017-11-27-06-51-32.sh
Check if the patch can be applied/reverted successfully…
The patch was applied/reverted successfully.
- Verification And Flushing of Magento Cache as well as Opcode Cache
To flush Magento caches, locate “System” in Magento backend and under that “Cache Management”. From there you can flush Magento cache and CSS/JS caches.Make sure flush the cache after patching if you prefer using PHP opcode caches, or else the code will consistently run from caches.
Hence, this is the way you can install the patch with SSH. Now, let’s consider the following process for installing the SUPEE-10415 without SSH.
Easy installation process without SSH
- Before you get started, disable the Magento’s compiler.
- Installing Magento Patches Through FTP/sFTP or File Manager
Simply replace the files to apply the patches. If you have changed any of the Magento’s core files, you cannot use this process blindly. For the changes like these, you should re-apply to patched files, or else you will lose these changes.
app/Mage.php app/code/core/Mage/Adminhtml/Block/Report/Review/Detail.php app/code/core/Mage/Adminhtml/Block/Report/Tag/Product/Detail.php app/code/core/Mage/Adminhtml/Block/Review/Add.php app/code/core/Mage/Adminhtml/Block/Review/Edit/Form.php app/code/core/Mage/Adminhtml/Controller/Action.php app/code/core/Mage/Adminhtml/Model/LayoutUpdate/Validator.php app/code/core/Mage/Adminhtml/Model/System/Config/Backend/Filename.php app/code/core/Mage/Api/Helper/Data.php app/code/core/Mage/Api/Model/Server/Adapter/Soap.php app/code/core/Mage/Api/Model/Wsdl/Config.php app/code/core/Mage/Api/Model/Wsdl/Config/Base.php app/code/core/Mage/Core/Helper/String.php app/code/core/Mage/Core/Model/File/Validator/Image.php app/code/core/Mage/Core/etc/config.xml app/code/core/Mage/Core/etc/system.xml app/code/core/Mage/Customer/Model/Customer.php app/code/core/Mage/Eav/Model/Entity/Attribute/Backend/Serialized.php app/code/core/Mage/Log/Helper/Data.php app/code/core/Mage/Rule/Model/Abstract.php app/code/core/Mage/Sales/Block/Adminhtml/Billing/Agreement/Grid.php app/code/core/Zend/Form/Decorator/Form.php app/design/adminhtml/default/default/template/backup/dialogs.phtml app/design/adminhtml/default/default/template/sales/billing/agreement/view/tab/info.phtml app/design/adminhtml/default/default/template/xmlconnect/edit/tab/content.phtml app/design/adminhtml/default/default/template/xmlconnect/edit/tab/design/image_edit.phtml app/locale/en_US/Mage_Adminhtml.csv app/locale/en_US/Mage_Customer.csv js/mage/adminhtml/backup.js lib/Varien/Filter/FormElementName.php
For the verification and flush of PHP Opcode cache, consider the same step which is used in the installation guide with SSH.If still, you find any difficulties while installing the patch, feel free to contact our expert Magento developers at Elsner Technology.
