Hi,
I was wondering if there is a security patch for 1.5.6.4 that I could install rather than have to upgrade for now? If not, I would be interested in consulting and hiring someone who could manually fix known security vulnerabilities.
Thank you.
Sevan
Please don't send me OC Forum Personal Messages, just contact: jti@jacob.ch
---
OC 1.5.6.5 LIGHT Test Site: http://www.bigmax.ch/shop/
OC 1.5.6.5 V-PRO Test Site: http://www.openshop.li/shop/
My Github OC Site: https://github.com/IP-CAM
2'800+ FREE OC Extensions on the World's largest Github OC Repository Archive Site.
I would upgrade to 1.5.6.5. Much easier. 
Opencart 1.5.6.5/OC Bootstrap Pro/VQMOD 2.6.1 lover, user and geek.
Affordable Service £££ - Opencart Installs, Fixing, Development and Upgrades
Plus Ecommerce, Marketing, Mailing List Management and More
FREE Guidance and Advice at https://www.ecommerce-help.co.uk
I don't believe the the unofficial versions of 1.5.6.5 will contain all the latest security patches. There have been vulnerabilities reported this year that will affect 1.5.x versions. Please correct me if I am wrong.
I help maintain a fork of OpenCart 1.5.5 on GitHub with the latest patches and about 300+ other bug fixes. Haven't done 1.5.6 yet as it's mainly 1.5.5 with OpenBay (may have its own extra issues) and a few payment modules added.
I help maintain a fork of OpenCart 1.5.5 on GitHub with the latest patches and about 300+ other bug fixes. Haven't done 1.5.6 yet as it's mainly 1.5.5 with OpenBay (may have its own extra issues) and a few payment modules added.
That's partly correct, at least, when it comes small changes, like placing an INT inI don't believe the the unofficial versions of 1.5.6.5 will contain all the latest security patches
places like here:
OLD:
Code: Select all
if (isset($this->request->get['page'])) {
$page = $this->request->get['page'];
} else {
$page = 1;Code: Select all
if (isset($this->request->get['page'])) {
$page = (int)$this->request->get['page'];
} else {
$page = 1;Please don't send me OC Forum Personal Messages, just contact: jti@jacob.ch
---
OC 1.5.6.5 LIGHT Test Site: http://www.bigmax.ch/shop/
OC 1.5.6.5 V-PRO Test Site: http://www.openshop.li/shop/
My Github OC Site: https://github.com/IP-CAM
2'800+ FREE OC Extensions on the World's largest Github OC Repository Archive Site.
You know your stuff Ernie.
Opencart 1.5.6.5/OC Bootstrap Pro/VQMOD 2.6.1 lover, user and geek.
Affordable Service £££ - Opencart Installs, Fixing, Development and Upgrades
Plus Ecommerce, Marketing, Mailing List Management and More
FREE Guidance and Advice at https://www.ecommerce-help.co.uk
If you are referring to https://github.com/opencart/opencart/issues/7218. That's not a security issue, just preventing warnings added to PHP 7.1.
Well, whatever shows up, not supposed to exist by default, is an error to me ... 
But it's officially confirmed, and that's all, what counts!
And to work with PHP7+, the 1.5.6.x system/library/encryption.php file needs to replaced,
like in OC2+ Versions too, it's exactly the same file, just to have this mentioned too:
viewtopic.php?f=202&t=206794&p=733801#p733629
Ernie
But it's officially confirmed, and that's all, what counts!
And to work with PHP7+, the 1.5.6.x system/library/encryption.php file needs to replaced,
like in OC2+ Versions too, it's exactly the same file, just to have this mentioned too:
viewtopic.php?f=202&t=206794&p=733801#p733629
Ernie
Please don't send me OC Forum Personal Messages, just contact: jti@jacob.ch
---
OC 1.5.6.5 LIGHT Test Site: http://www.bigmax.ch/shop/
OC 1.5.6.5 V-PRO Test Site: http://www.openshop.li/shop/
My Github OC Site: https://github.com/IP-CAM
2'800+ FREE OC Extensions on the World's largest Github OC Repository Archive Site.
Who is online
Users browsing this forum: No registered users and 40 guests
