The ecommerce season is moving in full swing. Online shop owners are busy in reaping the profits long before the start of the upcoming holiday season. Likewise, hackers are also busy in looking for loopholes on unsecured ecommerce websites. Magento, one of the world’s biggest ecommerce software that is used by the major online shops, is a honeypot target for the attackers. Luckily, developers at Magento are aware of this and have launched a new critical update bundle: SUPEE-6788.
SUPEE-6788 is the most powerful Magento release which requires your immediate attention if you are a Magento store owner. It is basically a package bundle which includes patches that help in resolving critical security related issues. This patch requires changes in the extensions/customization and as a result, it will affect your Magento store.
This tutorial will help in installing the patch on Magento websites. However, before proceeding, you need to make sure that you have all the previous security patches (before SUPEE-6788) installed. On Cloudways, all the patches prior to SUPEE-6788 have been installed. You can still confirm by contacting the 24/7 Support Team.
How to apply SUPEE-6788 on Cloudways
NOTE: It is highly recommended that you first deploy this on a staging site and test your website. After you are convinced that everything is in order on your staging site only then proceed replicating installation on your live store.
On Cloudways, you can easily clone your Magento website to a staging URL using the clone application feature in the platform.
After the cloning process is done, do the following on your staging site.
- Make a list of your extensions and modules to update them.
- Apply the patch.
- Clear your cache.
Step 1: Checking your extensions for compatibility and updating them
This patch has introduced a lot of changes that are not backward compatible. It means that many extensions that were still using deprecated functions will no longer work. This is alarming and should be your top priority to get the extensions checked and updated.
There is a community effort going on to list down all the extensions that are incompatible. You can refer to this Google Doc sheet here.
If you want to fix things yourself or have done some kind of customization in your Magento store, then refer to this post on guides on which codes should be changed to what. Additionally, you can also check what security related are issues addressed by SUPEE-6788 by clicking here.
Step 2: Apply the Patch
After you have checked and updated your extensions, then you should apply this patch.
a. Downloading the Appropriate Patch
First you should know which version of Magento you are using (if you don’t know check the footer of your Magento store admin).
Then, download the SUPEE-6788 appropriate patch from here.
b. Uploading the Patch through FTP
You will need to upload the downloaded patch file to the root of your Magento installation using a FTP software like FileZilla.
c. Setting Executable Permissions
After uploading the patch, you need to set the permission of patch file to be executable.
Login to SSH terminal and run the following command.
chmod +x PATCH_SUPEE-6788_CE_22.214.171.124_v1-2015-10-26-11-38-41.sh
d. Running the Patch
Finally, to apply the patch run the following command to execute it.
You will see something like this.
Checking if patch can be applied/reverted successfully...
Patch was applied/reverted successfully.
To check whether your Magento store is secure, head over to Mage Report and enter your website URL. If your patch was installed correctly, you should see something like this:
Step 3: Clear the Cache of Magento and Run the Compiler
After the verification process, you need to clear the cache and recompile your Magento store.
a. Clear the Magento Cache
Follow these two steps:
- On the Admin menu, select System > Cache Management.
- Click the Flush Cache Storage button.
b. Recompile the Store (Only if compiled)
If your store is compiled, you must recompile to incorporate the patch. If your store isn’t compiled, you can skip this step.
- On the Admin menu, select System > Tools > Compilation.
- Click the Run Compilation Process button.
You just upgraded your Magento store and are now safe to operate and reap benefits from the traffic spike in the upcoming holiday season.
Start Creating Web Apps on Managed Cloud Servers Now!
Easy Web App Deployment for Agencies, Developers and E-Commerce Industry