X-Cart forums

[NuAlpha]

The "register_globals" master value should not be an issue. If your host has the setting On, then simply create a ".htaccess" file in your site's web directory and add the line "php_value register_globals 0" to that file. This would seem be a better protection measure than the new variable mapping seen in 3.5.8.

But then again...

Any comments on this idea?

[NuAlpha]

If updating your top.inc.php file, should all of the new superglobals be added to the list instead of just $_GET and $_POST as posted by machnhed1?

For instance, should all of the following be in that list?
$GLOBALS, $_GET, $_POST, $_SERVER, $_COOKIE, $_FILES, $_ENV, $_REQUEST, $_SESSION

Or does Smarty 2.6.2 not need all of those?

[adpboss]

Smarty 2.6.3 is out.

Anyone successfully using this (2.6.2 or 2.6.3) with 3.5.7+ in a live environment?

The performance benefits kick major butt.

[NuAlpha]

I am waiting for 2.6.4. I have heard some of new bugs popping up with 2.6.3.

We are using 2.6.2 right now with 3.5.9 and everything is working great.

[adpboss]

NuAlpha,

Could you short list exactly what you did to insure compatability?

Did you do a massive find and replace or only a small change?

I'd appreciate it. I'm loving these "SPEED" mods more than adding a bunch of extra functions to my store.

Speed is king.

[NuAlpha]

Originally Posted by adpboss

Could you short list exactly what you did to insure compatability?

All I did was drag the required Smarty 2.6.2 components into the Xcart 2.5.0 folder (after backing it up).

I added the webmaster code to the new Smarty class file.

I changed all Smarty 2.5.0 references to Smarty 2.6.2 and updated the new settings with my old ones.

I also put the following to top.inc.php in place of the original 3.5.8 code:

if (!in_array($__key, array("HTTP_GET_VARS","HTTP_POST_VARS","HTTP_SERVER_VARS","HTTP_ENV_VARS","HTTP_COOKIE_VARS","HTTP_POST_FILES","__key","__val",
         "_GET","_POST","_SERVER","_COOKIE","_FILES","_ENV","_REQUEST","_SESSION","GLOBALS"))) {

In our .htaccess file I added php_value register_globals 0 to take care of the security issue.

I don't know about webmaster mode being broken or not as we do not use it at all. In that code there is a call to a few class variables that I can't find declared anywhere, so I don't know how to fix it anyway.

[Adian009]

I first upgraded to 2.6.2 then 2.6.3 and realized a couple of problems in the ADMIN area. I was unable to Manage Users and Edit Languages...I switched back to 2.5.0 and all is well.

Obviously, there are some version specific issues to be worked out before blindly upgrading...

--al

[phil_]

Just tried Smarty 2.6.3 (just doing the plain switch over as described in the starter topic). Initially everything looked good. Then noticed that the cantact form shows the thank you message you get after posting a message (it won't show the contact form details to fill in before sending), and also the Webmaster mode doesn't fully work (the listing of the TPL files used, that comes up in the status bar, do not appear.

Looks promising though when it is finally sorted. Hopefully this is something the x-cart guys can address? If not I'm interested to know if the complete integration can be achieved by others on this forum!

Thanks to all who are working on it, I hope you can find the full solution.

Philip.

[adpboss]

The solution is now in X-Cart 4.0

I do not see QualiTeam doing more than maintenance on the 3.5.x release. The huge featureset in 4.0 makes upgrading worthwhile as you will gain a lot more than just a Smarty upgrade.

[Geo1688]

My server has register_globals as ON and i changed my top.inc.php so that I could use smarty 2.62. I tried to change my .htaccess file so that the register_globals was set to 0, however once I added that line I couldn't access my website anymore.. it would be a server 500 error. I am using xcart 3.5.9. Any help will be appreciated to fix this error. Thank you.