X-Cart forums

[ambal]

Hey, Everyone,

I want to comment on this improvement a bit

X-Payments connector has got lots of improvements for better usability.

This update addresses many X-Payments known issues and troubles with X-Cart 4.x like too many technical DB entries about started orders at X-Cart side, saving customer notes,

cc_xpc_iframe.php called twice to display CC form, Product inventory levels are not getting decreased when a Pre-Authorized order is paid via X-Payments (lite interface) and others. I would say this is quite serious update of X-Cart 4 connector. Besides it comes with much improved and easier X-Payments connection procedure.

Read more about this update at http://forum.x-cart.com/showthread.php?p=374824

[herber@wirehub.nl]

Originally Posted by aim

Thank you for the quick WA.

I have reuploaded the upgrade packs with this addition in the patch.sql file

-- Thanks to Steve Stoyanov (Cflsystems)
UPDATE `xcart_orders` SET `all_userid` = `userid` WHERE `all_userid`=0;

I believe the new function to generate accounts for anonymous customers does not escape street names, as it has problems inserting anonymous accounts with streets that contain a '.
For example: Avenue de l'Europe

The query becomes:

INSERT INTO xcart_address_book (`title`, `firstname`, `lastname`, `address`, `city`, `county`, `state`, `country`, `zipcode`, `zip4`, `phone`, `fax`, `default_b`, `default_s`, `userid`) VALUES (■, 'FIRSTNAME', 'LASTNAME', 'Avenue de l'Europe
    droite', 'VИlizy-Villacoublay', ■, ■, 'FR', '123456', ■, '33633045883', ■, 'Y', 'Y', '19027')

As you can see the street name is not escaped.
My logs contain multiple errors related to executing this function and they all have street names with an ' in it.

[herber@wirehub.nl]

Originally Posted by herber@wirehub.nl

Completely different Mac, cleaned Safari Cache & X-Cart cache, still the same 404.

I fixed the CSS bug myself, so that is gone.
I can probably fix the Jquery 404 by just adding a copy of that file, but I'm tired & will try that tomorrow.

This can be fixed by adding a regular copy of JQuery 1.10.2 to the following folder:
/skin/common_files/lib/

The 404 will no longer occur as there is a normal version of JQuery available next to the minified version.

[aim]

Originally Posted by herber@wirehub.nl

I believe the new function to generate accounts for anonymous customers does not escape street names, as it has problems inserting anonymous accounts with streets that contain a '.
For example: Avenue de l'Europe

The query becomes:

INSERT INTO xcart_address_book (`title`, `firstname`, `lastname`, `address`, `city`, `county`, `state`, `country`, `zipcode`, `zip4`, `phone`, `fax`, `default_b`, `default_s`, `userid`) VALUES (■, 'FIRSTNAME', 'LASTNAME', 'Avenue de l'Europe
    droite', 'VИlizy-Villacoublay', ■, ■, 'FR', '123456', ■, '33633045883', ■, 'Y', 'Y', '19027')

As you can see the street name is not escaped.
My logs contain multiple errors related to executing this function and they all have street names with an ' in it.

I have uploaded a patch
apply_before_generate_anonymous.diff
to apply before anonymous generation.

[aim]

Q: I've updated my webshop to 4.6.4.
I now get the following message:
Critical config values authenticity check failed for the following variables/features:
*Check if HTTPS connection to site is available*
This may have been caused by spurious operation of the protection system or some kind of malicious activity.
You can disable the authenticity check for config values by setting the constant CHECK_CONFIG_INTEGRITY to FALSE in config.php.

A: It seems for some reason
the upgrade/4.6.x-4.6.4/patch_post.php file
was not launched during the upgrade.
To generate a new signature
1)apply the uploaded patch
2)Open the admin/home.php page in a web-browser
3)Remove the patch from the admin/home.php file

[cherie]

I ran into this issue when DEVELOPMENT_MODE was on. Turning that off before upgrading avoided this situation for me.

[Dougrun]

I just did a stock upgrade from 4.6.3 to 4.6.4 and now I cannot add wholesale prices. It just returns me to the main product screen.

edit: this is on ly on the "wholesale prices" page, if i add wholesale prices to variants, it works ok.

edit2: Is this the reason why?? product_modify.php.diff

@@ -1290,7 +1332,7 @@
 
     // Wholesale trading module
 
-    if (!empty($active_modules['Wholesale_Trading']) && $product_info['is_variants'] != 'Y') {
+    if (!empty($active_modules['Wholesale_Trading']) && (!empty($product_info['is_variants']) && $product_info['is_variants'] != 'Y')) {
         include $xcart_dir.'/modules/Wholesale_Trading/product_wholesale.php';
     }

[mixon]

Thank you. The issue has been fixed. We've re-uploaded the distribution packs.

[herber@wirehub.nl]

Originally Posted by mixon

Thank you. The issue has been fixed. We've re-uploaded the distribution packs.

Could you post a patch for those who have already upgraded? There are multiple product_modify.php files and I can't find which has changed now.

(might I say that it's great to see how fast Qualiteam responds to all the reported bugs & the speed at which they are fixed? Great!)

[aim]

Originally Posted by herber@wirehub.nl

Could you post a patch for those who have already upgraded? There are multiple product_modify.php files and I can't find which has changed now.

(might I say that it's great to see how fast Qualiteam responds to all the reported bugs & the speed at which they are fixed? Great!)

Thank you for your kind words.

I have uploaded the patch