Re: security-patch-2007-10-29.tgz
 

That's what I mean, they didn't issue a .diff, they just said 'here, replace your files'. You need to use a compare program and make the changes you find, and there are quite a few depending on how custom your func.php is.

Re: security-patch-2007-10-29.tgz
 

I also did not receive an email regarding this security patch!!!!!!!!

Re: security-patch-2007-10-29.tgz
 

http://www.scootersoftware.com/

Re: security-patch-2007-10-29.tgz
 

You shouldn't worry about not getting the e-mail from us to the moment as you haven't got the e-mail YET. We send our newsletters in some portions usually in order not to create a huge overload impact on our servers like if we send them all at once. I am sure you'll get the e-mail in some time later.

Also, please make sure your spam filter allows messages from our domains.

Re: security-patch-2007-10-29.tgz
 

Alexander, is there a reason this patch was not released as a .diff? You guys have created about 20 hours of work for me in having to go into each of my clients stores and compare their func.php file to the new one and make the appropriate changes.

Re: security-patch-2007-10-29.tgz
 

Howdy folks!'

I contacted X-Cart last night and received the following:

"The software architects informed that a diff patch for X-Cart will be released in the nearest 1-2 business days. We'll let you know as soon as it's available."

I also went in and made sure my contact email address was current - it wasn't (remember the massive spoofing campaign I weathered? - I had to change domains - and concommitantly, emails... and hadn't updated my profile at X-Cart). I updated/fixed that too.

Re: security-patch-2007-10-29.tgz
 

Excellent...good to hear!

Re: security-patch-2007-10-29.tgz
 

Why is func.php full of changes that have nothing to do with patching security, such as discount calculations? A security patch should be just that and that alone. Now I've either got to test a dozen other things or manually pick out the security related changes from the patch.

Re: Security Patch - 11-1-07
 

We've updated security-patch-2007-10-29.tgz in the XB file area and now it contains diff files too.

Also I've attached security-patch-2007-10-29_diffs-only.zip file to this message for further use.

Re: security-patch-2007-10-29.tgz
 

Well that didn't work...on a fresh install of 4.1.8, the only file that patches is /include/func/func.db.php. The rest result in a 'could not patch' error, even though they are default files. Testing other versions now.