X-Cart forums

[herber@wirehub.nl]

Originally Posted by herber@wirehub.nl

Great to see how fast bugs are fixed after they're reported, even though the team is probably busy as it is already!

Is 4.7.6 compatible with Google's mod_pagespeed?
Not that our website is slow, but mod_pagespeed would be a very easy way to get even more performance.

I have currently installed mod_pagespeed on my testserver, and it seems it handles X-Cart 4.7.6 quite well, I haven't encountered any errors yet, but I also don't detect any performance improvements (and yes, according to the page headers, mod_pagespeed is enabled).

[cflsystems]

Sitemap bug - using cache will just print "array" instead of the items. Template just calls the smarty variable that holds the cached sitemap items.
.
Reported - https://bt.x-cart.com/view.php?id=46478

[Dougrun]

question: The "Sept Security bug patch" notification in the admin. Does that show for everyone or does it actually check for the patch? I'm on 4.7.6 already but upgraded and just want to be sure.

[aim]

Originally Posted by Dougrun

question: The "Sept Security bug patch" notification in the admin. Does that show for everyone or does it actually check for the patch? I'm on 4.7.6 already but upgraded and just want to be sure.

You have to apply this security-patch-2016-09-20_4.7.6.tgz security patch (including patch.sql) in order to hide the notification.

Thank you.

[Dougrun]

then you need to fix your page that says "Affected version: 4.6.0 - 4.7.5"

[aim]

Originally Posted by Dougrun

then you need to fix your page that says "Affected version: 4.6.0 - 4.7.5"

There are two issues

1) SQL Injection Affected version: 4.6.0 - 4.7.5
This issue is not related to your version

2) Smarty shell injection vulnerability
Affected versions: all versions
This issue is related to your version

Thank you.

[cflsystems]

I agree this is a little bit confusing. It fooled me in the beginning as well.
It's all in the email but the way it is presented no one at first pays attention at the line

Affected versions: all versions

We all see the numbers first

[Anna_Shvetsova]

Thank you for your feedback. We'll take it into account when preparing future notifications about available security patches.

[cherie]

The confusing part is that one of the solutions is to upgrade to the latest version which is not correct.

[josebueso]

Hello Every one.

I'm looking for some help to find the source of this error:On my xcart4.7.6 Logs. I just upgraded to this version Xcart476.

PHP errors
[01-Oct-2016 09:53:59 UTC] PHP Fatal error: Call to undefined function func_get_default_fields() in /home/uncionmu/public_html/include/search_users.php on line 80

I have some problem searching for user in the backend, and it happen only when I am looking for as specific user name.

Thanks in advance

Saul