How to Install Magento SUPEE 8788 with or without SSH
Magento releases Security Patches from time to time to ensure Magento stores security against potential threats. It is highly recommended for Magento store owners to get these patches installed in their store in order to have the functioning of the store without any hindrance.
One such Security Patch Magento SUPEE 8788 was released by Magento to provide protection against security issues like remote code execution, information leaks, cross-site scripting, Zend framework and payment vulnerabilities. Moreover, it ensures that sessions are invalidated after a user logs out. The patch also resolves compatibility issues with SUPEE patches 1533 and 3941 faced by merchants using CE 1.8 and EE 1.13 and earlier versions. Apart from security issue, it also resolves the issue with some third party payment methods during checkout.
With nearing of Magento 1 end of life, it is strongly recommended to migrate to the latest Magento 2.4.6 rather than installing Magento SUPEE-8788.
Installing Magento SUPEE 8788
- Revert SUPEE-8788 if you have already installed it.
- Revert SUPEE-1533 if you have already installed it.
- Deploy SUPEE-3941 if it hasn’t already been installed.
- Install the new SUPEE-8788 v2 patch. This patch includes SUPEE-1533, so you don’t need to worry about re-installing it.
To automate the above process, you can use bash installer script.
Method 1: Install Magento SUPEE 8788 using SSH
Contact your hosting provider if you don’t know how to set up SSH. Download SUPEE 8788 Patches files for your Magento Version from here.
Upload the patch into your Magento root directory and run the appropriate SSH command:
For .sh file extension:
|
1 |
sh patch_file_name.sh |
Example:
|
1 |
sh PATCH_SUPEE-8788_CE_v2.9.3.2-1.9.3.7_v2-2018-02-23-06-01-40.sh |
For .patch file extension:
|
1 |
patch —p0 < patch_file_name.patch |
Note: Once executed the command, refresh the cache in the Admin under “System > Cache Management” so that the changes can be reflected. We strongly recommend that you test all patches in a test environment before taking them live.
Method 2: Install Magento SUPEE 8788 with PrePatched Files
Download the zip file for your Magento Version for the patch installation. You can also download these Pre Patched files from GitHub. After downloading the files, just upload it to your Magento root folder.
|
|
|
|---|---|
| Magento Version | SUPEE 8788 |
| Magento 1.9.2.4 | CE-1.9.2.4v2 |
| Magento 1.9.2.3 | CE-1.9.2.3v2 |
| Magento 1.9.2.1 | CE-1.9.2.1v2 |
| Magento 1.9.1.1 | CE-1.9.1.1v2 |
| Magento 1.9.0.1 | CE-1.9.0.1v2 |
| Magento 1.8.1.0 | CE-1.8.1.0v2 |
| Magento 1.7.0.2 | CE-1.7.0.2v2 |
How to check if Magento SUPEE 8788 has been installed correctly?
magereport.com can be used to check if Security Patch Magento SUPEE 8788 has been installed correctly or not.
Possible Issues after installing Magento SUPEE 8788:
- “Call to undefined function hash_equals() error”
The error means a local override has taken place at app/code/local/Mage/Core/functions.php. Confirm the override of file and add the following code at the end of it if the file exists.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 |
if (!function_exists('hash_equals')) { /** * Compares two strings using the same time whether they're equal or not. * A difference in length will leak * * @param string $known_string * @param string $user_string * @return boolean Returns true when the two strings are equal, false otherwise. */ function hash_equals($known_string, $user_string) { $result = 0; if (!is_string($known_string)) { trigger_error("hash_equals(): Expected known_string to be a string", E_USER_WARNING); return false; } if (!is_string($user_string)) { trigger_error("hash_equals(): Expected user_string to be a string", E_USER_WARNING); return false; } if (strlen($known_string) != strlen($user_string)) { return false; } for ($i = 0; $i < strlen($known_string); $i++) { $result |= (ord($known_string[$i]) ^ ord($user_string[$i])); } return 0 === $result; } } |
If you face any difficulties in the installation process mention them in the Comments Section below. We would find a solution it together! If you are not comfortable installing patches on your own, check out our Magento Security Patches Installation Service.
Having the upgraded version of Magento, i.e., Magento Version 1.9.3.0, will facilitate in-built Security Patches including Magento SUPEE 8788. So, it is recommended to have Magento Upgrade Service instead.
We are waiting for your feedback and suggestions through comments. Also, hit down the 5 stars below if this guide found helpful!
Keep the security of your Magento store updated to the highest level using our Magento Security Patches Installation Service.
2 Comments
SUPEE 8788 for Magento 1.9.1.0 ? did u have patch for this version.
You can use CE-1.9.1.1v2, it will work.