Follow us on Twitter X-Cart on Facebook Wiki
Shopping cart software Solutions for online shops and malls
 

X-Cart vs UPS OnLine Tool Change

 
Reply
   X-Cart forums > News and Announcements
 
Thread Tools
  #11  
Old 04-29-2009, 10:16 AM
 
carpeperdiem carpeperdiem is offline
 

X-Guru
  
Join Date: Jul 2006
Location: New York City, USA
Posts: 5,399
 

Default Re: X-Cart vs UPS OnLine Tool Change

Eugene,

My store is 4.1.9 and the patch indicates, "already patched"...

Result of the testing phase...

Quote:
File Status
include/func/func.https_curl.php already patched
include/func/func.https_httpscli.php already patched
include/func/func.https_libcurl.php already patched
include/func/func.https_openssl.php already patched
include/func/func.https_ssleay.php already patched
payment/netssleay.pl already patched
shipping/mod_UPS.php already patched

Maybe the recent security updates already took care of this? Do you have any idea why my store reports "already patched" ?
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4
Reply With Quote
  #12  
Old 04-30-2009, 12:36 AM
  Ene's Avatar 
Ene Ene is offline
 

X-Cart team
  
Join Date: Aug 2004
Posts: 907
 

Default Re: X-Cart vs UPS OnLine Tool Change

The patches for 4.0.x and 3.5.x will be available a bit later. As soon as they are ready I will post them here for sure.

If you have X-Cart v3.5.x/4.0.x and want to apply patches right now, not waiting till I attach them, feel free to contact our support team as I said before.

2carpeperdiem: please attach your shipping/mod_UPS.php and include/func/func.https_libcurl.php files.
__________________
Eugene Kaznacheev,
Evangelist/Product Manager at Ecwid: http://www.ecwid.com/ (since Sept 2009)

ex-Head of X-Cart Tech Support Department
ex- X-Cart Hosting Manager - X-Cart hosting
ex-X-Cart Technical Support Engineer


Note: For the official guaranteed tech support services please turn to the Customers HelpDesk.
Reply With Quote
  #13  
Old 04-30-2009, 02:50 AM
 
carpeperdiem carpeperdiem is offline
 

X-Guru
  
Join Date: Jul 2006
Location: New York City, USA
Posts: 5,399
 

Default Re: X-Cart vs UPS OnLine Tool Change

As requested:

files attached. thanks.
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4
Reply With Quote
  #14  
Old 04-30-2009, 03:32 AM
  Ene's Avatar 
Ene Ene is offline
 

X-Cart team
  
Join Date: Aug 2004
Posts: 907
 

Default Re: X-Cart vs UPS OnLine Tool Change

The patch is not applied to these files. So I need to investigate the issue further.

Let's discuss it in our HelpDesk, please create a new ticket with the 'For Eugene Kaznacheev' subject and I will look into this.
__________________
Eugene Kaznacheev,
Evangelist/Product Manager at Ecwid: http://www.ecwid.com/ (since Sept 2009)

ex-Head of X-Cart Tech Support Department
ex- X-Cart Hosting Manager - X-Cart hosting
ex-X-Cart Technical Support Engineer


Note: For the official guaranteed tech support services please turn to the Customers HelpDesk.
Reply With Quote
  #15  
Old 04-30-2009, 03:47 AM
  Ene's Avatar 
Ene Ene is offline
 

X-Cart team
  
Join Date: Aug 2004
Posts: 907
 

Default Re: X-Cart vs UPS OnLine Tool Change

BTW to my personal opinion UPS guys exaggerate this issue a little.

If the server is configured properly, the SSL3/TLS1 will be used for all secure connections even if we don't specify it directly in our PHP scripts.
It means that even if you don't apply the patch, your store will still be able to connect to UPS servers.

If your server still uses an outdated SSL2 and you use UPS, the patch must be applied.

Nevertheless it is highly recommended to apply the patch to avoid any possible issues.
__________________
Eugene Kaznacheev,
Evangelist/Product Manager at Ecwid: http://www.ecwid.com/ (since Sept 2009)

ex-Head of X-Cart Tech Support Department
ex- X-Cart Hosting Manager - X-Cart hosting
ex-X-Cart Technical Support Engineer


Note: For the official guaranteed tech support services please turn to the Customers HelpDesk.
Reply With Quote

The following user thanks Ene for this useful post:
finerpeter (04-30-2009)
  #16  
Old 04-30-2009, 04:17 AM
 
carpeperdiem carpeperdiem is offline
 

X-Guru
  
Join Date: Jul 2006
Location: New York City, USA
Posts: 5,399
 

Default Re: X-Cart vs UPS OnLine Tool Change

Quote:
Originally Posted by Ene
The patch is not applied to these files. So I need to investigate the issue further.

Let's discuss it in our HelpDesk, please create a new ticket with the 'For Eugene Kaznacheev' subject and I will look into this.

You've got mail. Thanks.
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4
Reply With Quote
  #17  
Old 04-30-2009, 05:31 AM
 
carpeperdiem carpeperdiem is offline
 

X-Guru
  
Join Date: Jul 2006
Location: New York City, USA
Posts: 5,399
 

Default Re: X-Cart vs UPS OnLine Tool Change

Patch worked after we set permissions BEFORE trying to apply the patch. Something must have tricked the utility into thinking it was patched when we waited for the file list to change permissions.

Thanks Eugene for looking into this.
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4
Reply With Quote
  #18  
Old 05-04-2009, 12:19 AM
  Ene's Avatar 
Ene Ene is offline
 

X-Cart team
  
Join Date: Aug 2004
Posts: 907
 

Default Re: X-Cart vs UPS OnLine Tool Change

For 4.0.19
Attached Files
File Type: txt ups_patch_for_4.0.19.txt (6.9 KB, 14 views)
__________________
Eugene Kaznacheev,
Evangelist/Product Manager at Ecwid: http://www.ecwid.com/ (since Sept 2009)

ex-Head of X-Cart Tech Support Department
ex- X-Cart Hosting Manager - X-Cart hosting
ex-X-Cart Technical Support Engineer


Note: For the official guaranteed tech support services please turn to the Customers HelpDesk.
Reply With Quote

The following user thanks Ene for this useful post:
ranger82nd (05-04-2009)
  #19  
Old 05-04-2009, 12:19 AM
  Ene's Avatar 
Ene Ene is offline
 

X-Cart team
  
Join Date: Aug 2004
Posts: 907
 

Default Re: X-Cart vs UPS OnLine Tool Change

For 3.5.14
Attached Files
File Type: txt ups_patch_for_3.5.14.txt (6.5 KB, 5 views)
__________________
Eugene Kaznacheev,
Evangelist/Product Manager at Ecwid: http://www.ecwid.com/ (since Sept 2009)

ex-Head of X-Cart Tech Support Department
ex- X-Cart Hosting Manager - X-Cart hosting
ex-X-Cart Technical Support Engineer


Note: For the official guaranteed tech support services please turn to the Customers HelpDesk.
Reply With Quote
  #20  
Old 05-04-2009, 02:44 PM
 
gravel gravel is offline
 

Senior Member
  
Join Date: Mar 2004
Posts: 156
 

Default Re: X-Cart vs UPS OnLine Tool Change

Quote:
Originally Posted by Ene
For 4.0.19
We have sites that use 4.0.17 and 4.0.18. Will this patch work for them?
__________________
X-Cart version 4.0.17
X-Cart version 4.0.18
Web servers = Apache
OS = Linux
Reply With Quote
Reply
   X-Cart forums > News and Announcements



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -8. The time now is 12:20 AM.

   

 
X-Cart forums © 2001-2020