| ||||||||||
Shopping cart software Solutions for online shops and malls | ||||||||||
|
#41
|
|||||||
|
|||||||
Re: X-Cart 4.5.5 released
PS -- if the "can't login as admin" after the upgrade is related to the "no more simple admin passwords" - so called improvement, and if X-Cart released this installer without a way to workaround or bypass a simple admin password, then the installer MUST be pulled and changed so that there is NO WAY the installer can run if the admin password is "simple". The installer must give the admin an opportunity to create a new password to avoid this mess. You would think?
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4 |
|||||||
#42
|
|||||||
|
|||||||
Re: X-Cart 4.5.5 released
Quote:
When upgrading from X-Cart versions 4.5.4 or earlier to an X-Cart version 4.5.5 or later, one important feature of the upgrade process is that the file config.php has to be patched successfully. Otherwise the shop will not work after the upgrade. If at the first step of the upgrade process you got an error notification regarding the file config.php, the error needs to be corrected before you proceed with the upgrade. You can fix the problem as follows: 1) Temporarily remove any customizations you might have made to config.php. 2) Apply the upgrade/4.5.x-4.5.5/config.php.diff patch to your store manually (For more information, see http://help.x-cart.com/index.php?title=X-Cart:To_apply_a_patch_manually) 3) Obtain a new X-Cart 4.5.5 distribution pack and carefully transfer the changes from the config.php file contained in this distribution pack to the config.php in your store using a visual diff tool for file comparison like vimdiff. In transferring the changes you should be guided by upgrade/4.5.x-4.5.5/config.php.diff. You can then go back to the first step of the upgrade process. Could you provide us with your var/upgrade/4.5.4-4.5.5/patch.log file ?
__________________
Sincerely yours, Ildar Amankulov Head of Maintenance group |
|||||||
#43
|
|||||||
|
|||||||
Re: X-Cart 4.5.5 released
Quote:
Let me reply you here. I am Vladimir also You mentioned HTTPS but it's not about protecting weak passwords, it's about protecting any password than may be sniffed if send in pain text via HTTP. So it's recommended to use it in any case. As for IP restriction, it's a good idea (and it's already implemented at many levels in X-Cart; search for "user access control", "protected mode" at help.x-cart.com) but it won't work in some cases (e.g. frequently changing IP address for a very same user/connection) so there is a high probability that a merchant will disable this feature and will give a hacker a good chance of accessing his store admin back-end if a weak password is used. Overall, when speaking about security, especailly in ecommerce where there is a real chance of being fined by VISA or even sued, nothing is superfluous. And since X-Cart is an ecommerce platform with thousands of clients, we lawfully supposed it's a good idea to be a little bit paranoid. By the way, for now X-Cart is one of the most secured carts on market. Quote:
Absolutely. Quote:
I understand your frustration and there may be a separate thread for this in Rants and Raves but when it comes to security we treat it very seriously. And it's not about doing things we like to do, it's about doing things we must do with the highest priority.
__________________
Sincerely yours, Vladimir Gritsenko VP Marketing @ X-Cart |
|||||||
#44
|
|||||||
|
|||||||
Re: X-Cart 4.5.5 released
Quote:
AH - yes, but.... If we want to use x-payments 1.0.6 that apparently has been fixed, we must also take the rest of the store to 4.5.5 (even though many patches were made to fix 4.5.4 bugs). This is going to be a week+ project -- my kids are off school monday/tuesday and I am not working for a few days! Yeah!
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4 |
|||||||
#45
|
|||||||||
|
|||||||||
Re: X-Cart 4.5.5 released
Quote:
|
|||||||||
|
#46
|
|||||||||
|
|||||||||
Re: X-Cart 4.5.5 released
From a few posts here - I must say:
Why are you upgrading live store with new version that was just released, no feedback on it yet, it features new futures (not only bug fixes) so it is almost 100% that there will be either bugs or hickups or something not working... Go back to your working 4.5.4 store. Upgrade to 4.5.5 on a dev copy It is QTs fault to release buggy upgrade but it is your fault that it broke your live store... Sorry....
__________________
Steve Stoyanov CFLSystems.com Web Development |
|||||||||
#47
|
|||||||||
|
|||||||||
Re: X-Cart 4.5.5 released
Quote:
|
|||||||||
#48
|
|||||||||
|
|||||||||
Re: X-Cart 4.5.5 released
kevinrm
__________________
Steve Stoyanov CFLSystems.com Web Development |
|||||||||
#49
|
|||||||
|
|||||||
Re: X-Cart 4.5.5 released
Quote:
There was no problem with the config.php file, it patched successfully. The first time I tried to run it, I found about 10 files that were not stock so I went back and replaced those with stock 4.5.4 files in order to proceed with the upgrade smoothly, I planned to modify them again after the upgrade. Ran the upgrade again. The only file that could not be patched was the currencies.php file because for some reason that file is not located in the standard download of x-cart 4.5.4. Attached (zipped) is the patch log.
__________________
X-Cart 5.4.1.39 Live PHP 7.4.33 5.5.5-10.3.38-MariaDB MariaDB Apache 2.4 CENTOS 7.8 64Bit Single Quad-Core E3-1241v3 3.4Ghz 8M 1600 w/ HT 32GB RAM 2x 512GB Samsung 850 Pro SSD RAID 1 |
|||||||
|
#50
|
|||||||||
|
|||||||||
Re: X-Cart 4.5.5 released
Quote:
Actually, if admin had "simple" password before upgrade he should be able to use it successfully after upgrade. However, it can be changed only to "strong" password and we strongly recommend to do this after upgrade. Quote:
Regarding the issue with inability to log in after upgrade - it can be caused only by incorrectly performed upgrade. It may happen due to different reasons - manual apply, highly cusmozied store, etc. We've also found out that unticking "Tick here to continue upgrading regardless of the found problems" checkbox may solve the problem. Please try it. Meanwhile, we are now working on the new upgrade pack which should also solve these issues. It will be released soon.
__________________
Sincerely yours, Vladimir Petrov Senior X-Payments Developer |
|||||||||
|
|||
X-Cart forums © 2001-2020
|