How to Install Magento SUPEE 10888 [With or Without SSH]
Yesterday, Magento released SUPEE 10888 containing multiple security enhancements to provide the security against cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities. We recommend all the Magento 1.x version users to install Magento SUPEE 10888 to integrate security enhancements and protect Magento stores from potential threats.
With nearing of Magento 1 end of life, it is strongly recommended to migrate to the latest Magento 2.4.6 rather than installing Magento SUPEE-10888.
Installation process for Magento SUPEE 10888:
There are 2 ways to install Magento Supee 10888 patches: with SSH or without SSH. , Here I’ve come up with both the methods to easily patch your Magento.
-
:
Contact your hosting provider if you don’t know how to set up SSH. Download Magento SUPEE 10888 Patch files for your Magento Version from here.
Upload the patch into your Magento root directory and run the appropriate SSH command:
For .sh file extension:
1sh patch_file_name.shExample:
1sh PATCH_SUPEE-10888_CE_v1.9.1.1_v1-2018-09-18-02-53-38.shFor .patch file extension:
1patch —p0 < patch_file_name.patchFor Linux OS or Ubuntu derived machines:
On Linux OS or Ubuntu derived machines, using sh will throw an error as sh is supposed to be used only with purely POSIX compliant scripts and Magento scripts are not 100% POSIX compliant. Instead, on Ubuntu and derived OSes such as Linux Mint, you should use,
1bash patch.shNote: After the command execution, refresh the admin cache under “System > Cache Management” to reflect the changes. It’s strongly recommended to test all the patches in a test environment before installing them in live.
-
Download the zip file for your Magento Version for the patch installation. You can also download these Pre Patched files from GitHub. After downloading the files, just upload it to your Magento root folder.
|
|
|||
|---|---|---|---|
| Magento version | SUPEE-10888 | ||
| Magento 1.9.3.8 – 1.9.3.9 | SUPEE-10888-1.9.3.8 – 1.9.3.9 | ||
| Magento 1.9.3.3 – 1.9.3.7 | SUPEE-10888-1.9.3.3 – 1.9.3.7 | ||
| Magento 1.9.3.0 – 1.9.3.2 | SUPEE-10888-1.9.3.0 – 1.9.3.2 | ||
| Magento 1.9.2.0 – 1.9.2.4 | SUPEE-10888-1.9.2.0 – 1.9.2.4 | ||
| Magento 1.9.1.0 – 1.9.1.1 | SUPEE-10888-1.9.1.0 – 1.9.1.1 | ||
| Magento 1.8.1.0 – 1.9.0.1 | SUPEE-10888-1.8.1.0 – 1.9.0.1 | ||
| Magento 1.8.0.0 | SUPEE-10888-1.8.0.0 | ||
| Magento 1.7.0.0 – 1.7.0.2 | SUPEE-10888-1.7.0.0 – 1.7.0.2 | ||
| Magento 1.6.1.0 – 1.6.1.9 | SUPEE-10888-1.6.1.0 – 1.6.1.9 | ||
| Magento 1.6.0.0 | SUPEE-10888-1.6.0.0 | ||
| Magento 1.5.0.1 – 1.5.1.0 | SUPEE-10888-1.5.0.1 – 1.5.1.0 | ||
How to check if Magento SUPEE 10888 has been installed correctly?
The best, quick and easiest method to check for the patches installed is using magereport.com.
Another way to check for the patches installed is, using SSH. Every installed patch can be found in your store content specifically logged in to app/etc/applied.patches.list.
So you can use the ‘grep’ command to access the list:
|
1 |
grep ‘|' app/etc/applied.patches.list |
You’ll get output like this:
|
1 |
2018-09-19 09:12:52 IST | SUPEE-10888_CE_v1.9.1.1 | CE_1.9.1.1 | v1 | 3fc28bb1b75659bd1e0123271d29ff11b5acebe2 | Wed Sep 19 09:12:52 2018 +0300 | ce-1.9.1.1-dev |
How to revert a patch if you are facing any issue?
Run the following SSH Command to revert your patch.
|
1 |
sh patch-file-name.sh -R |
Do let me know if you stuck somewhere while installing Magento SUPEE 10888 and I would be happy to help solving it. Don’t forget to comment down your Magento version along with issue to help you out quicker and better.
We highly recommend upgrading your Magento to the latest version Magento 1.9.4.5 which includes all the security patches including SUPEE 10888. If you need any help regarding Magento Version Upgrade, Checkout our Magento Upgrade Service.
We can also help you install Magento SUPEE 10888 professionally, visit our Magento Security Patches Installation Service.
Related Blogs:
Keep the security of your Magento store updated to the highest level using our Magento Security Patches Installation Service.
![How to Install Magento SUPEE 10888 [With or Without SSH]](https://meetanshi.com/blog/wp-content/uploads/2023/10/Sanjay-Jethva.png){kind=avatar}
14 Comments
for 1.9.3.6 does SUPEE-10888-1.9.3.3 – 1.9.3.7 will works ?
Yes, it will. That patch will work for any version in between 1.9.3.3 to 1.9.3.7
Please add for 1.9.1.0
It’s already there please check above.
for 1.9.1.0 i tried SUPEE-10888-1.9.1.0 – 1.9.1.1 this one but with that site crashed when user signup. Fatal error: Call to undefined method Mage_Customer_Helper_Data::getPasswordTimestamp can u guide me or upload purely for 1.9.1.0 please
The files from where u create these patch files did u use fresh 1.9.1.0 or choose that one which already having previous patches ?seems like its fresh thats why many previous patches work not there.
I am also getting the same error.
Fatal error: Call to undefined method Mage_Customer_Helper_Data::getPasswordTimestamp() in app/code/core/Mage/Core/Model/Session/Abstract/Varien.php on line 467
Can you help me getting rid of this issue?
Hi Tarun,
You haven’t installed the patch properly. Kindly follow the guide and try installing the patch again.
I had the same issue after applying the above files in a magento 1.9.1.0 website. I went to that link https://github.com/OpenMage/magento-mirror/blob/magento-1.9/app/code/core/Mage/Customer/Helper/Data.php copied the code and created a new Data.php file into app/code/local/Mage/Customer/Helper. That worked for me. I hope it helps
Installed the patch…no issues through ZIP…but magereport doesn’t say anything about 10888. Also, the applied patches list doesn’t say anything about 10888 is installed. Please advise.
Hi DKing,
Magereport has not added 10888 in the list to check about the patch installation.
Hi DKing,
Magereport guys are working on the same.
http://prntscr.com/kzcm9l
Hello,
I’ve installed this patch SUPEE-10888-1.9.3.8 – 1.9.3.9
But if I go on the footer of the Magento admin I still see the version 1.9.3.8 instead of 1.9.3.10.
I’ve cleaned the cache and I’ve done the log out.
Can someone explain to me why? 🙂
Patching will not change the Magento version. It will only install the patches. If you want to upgrade your Magento store to the latest version, do check our Magento Upgrade Service! 🙂