View Single Post
  #23  
Old 04-29-2015, 03:13 AM
 
herber@wirehub.nl herber@wirehub.nl is offline
 

eXpert
  
Join Date: Nov 2002
Posts: 305
 

Default Re: Attention users of X-Cart vv.4.0.x - 4.7.1

Quote:
Originally Posted by aim
I have reuploaded the
security-patch-2015-04-28_4.0.19.tgz
security-patch-2015-04-28_4.1.12.tgz
security-patch-2015-04-28_4.2.3.tgz
security-patch-2015-04-28_4.3.2.tgz

security patches.

I have removed the line
$user = abs(intval($user));
from these patches.

Sorry for that.
Hi Aim,

- Why is in the 4.6.6 > 4.7.2 upgrade, the addons.lst ignored when upgrading? All the files listed in there, are not being patched
- If I add all lines from addons.lst to file.lst, the files are patched, but it seems the modules are not upgraded very good, see my screenshot from my previous post.

Please do help since I want to upgrade our stores, these are very serious XSS bugs.
__________________
X-Cart 4.7.12
Reply With Quote