X-Cart forums - X-Cart vs UPS OnLine Tool Change

Page 2 of 3

Show 40 posts from this thread on one page

X-Cart forums (https://forum.x-cart.com/index.php)

- News and Announcements (https://forum.x-cart.com/forumdisplay.php?f=28)

- - X-Cart vs UPS OnLine Tool Change (https://forum.x-cart.com/showthread.php?t=47262)

carpeperdiem

04-29-2009 10:16 AM

Re: X-Cart vs UPS OnLine Tool Change

Eugene,

My store is 4.1.9 and the patch indicates, "already patched"...

Result of the testing phase...

Quote:

File Status
include/func/func.https_curl.php already patched
include/func/func.https_httpscli.php already patched
include/func/func.https_libcurl.php already patched
include/func/func.https_openssl.php already patched
include/func/func.https_ssleay.php already patched
payment/netssleay.pl already patched
shipping/mod_UPS.php already patched

Maybe the recent security updates already took care of this? Do you have any idea why my store reports "already patched" ?

Ene	04-30-2009 12:36 AM

Re: X-Cart vs UPS OnLine Tool Change

The patches for 4.0.x and 3.5.x will be available a bit later. As soon as they are ready I will post them here for sure.

If you have X-Cart v3.5.x/4.0.x and want to apply patches right now, not waiting till I attach them, feel free to contact our support team as I said before.

2carpeperdiem: please attach your shipping/mod_UPS.php and include/func/func.https_libcurl.php files.

carpeperdiem

04-30-2009 02:50 AM

Re: X-Cart vs UPS OnLine Tool Change

As requested:

files attached. thanks.

Ene	04-30-2009 03:32 AM

Re: X-Cart vs UPS OnLine Tool Change

The patch is not applied to these files. So I need to investigate the issue further.

Let's discuss it in our HelpDesk, please create a new ticket with the 'For Eugene Kaznacheev' subject and I will look into this.

Ene	04-30-2009 03:47 AM

Re: X-Cart vs UPS OnLine Tool Change

BTW to my personal opinion UPS guys exaggerate this issue a little.

If the server is configured properly, the SSL3/TLS1 will be used for all secure connections even if we don't specify it directly in our PHP scripts.
It means that even if you don't apply the patch, your store will still be able to connect to UPS servers.

If your server still uses an outdated SSL2 and you use UPS, the patch must be applied.

Nevertheless it is highly recommended to apply the patch to avoid any possible issues.

carpeperdiem

04-30-2009 04:17 AM

Re: X-Cart vs UPS OnLine Tool Change

Quote:

Originally Posted by Ene

You've got mail. Thanks.

carpeperdiem

04-30-2009 05:31 AM

Re: X-Cart vs UPS OnLine Tool Change

Patch worked after we set permissions BEFORE trying to apply the patch. Something must have tricked the utility into thinking it was patched when we waited for the file list to change permissions.

Thanks Eugene for looking into this.

Ene	05-04-2009 12:19 AM

Re: X-Cart vs UPS OnLine Tool Change

1 Attachment(s)

For 4.0.19

Ene	05-04-2009 12:19 AM

Re: X-Cart vs UPS OnLine Tool Change

1 Attachment(s)

For 3.5.14

gravel

05-04-2009 02:44 PM

Re: X-Cart vs UPS OnLine Tool Change

Quote:

Originally Posted by Ene

For 4.0.19

We have sites that use 4.0.17 and 4.0.18. Will this patch work for them?

All times are GMT -8. The time now is 03:13 PM.

Page 2 of 3

Show 40 posts from this thread on one page