Get a Free Quote
Our Blog

SUPEE-10415: Easy Installation Guide With / Without SSH

1,260 total views
Dipak Patil
November 29, 2017
SUPEE-10415-Easy-Installation-Guide

SUPEE-10415 a newly launched Magento’s  security patch which enhances the security of Magento Commerce 1.14.3.7 and Open Source 1.9.3.7. It enriches the DoS (Denial-of-Service), Cross-site Request Forgery (CSRF) and RCE (Remote Code Execution) vulnerabilities. For initial customers who face issues while patching which occurred by SOAP v1 interactions in WSDL, these patches contain a fix which resolves those issues too.

In the below article, you will find two ways of installing the SUPEE-10415. You can install it in both the cases i.e, in the presence of SSH as well as without SSH.

The process of installing SUPEE-10415 With SSH is simple enough. Consider the below mention steps but make sure you disable the Magento’s compiler.

 

  • Magento Version Verification
$ grep -A6 'static function getVersionInfo' app/Mage.php
    public static function getVersionInfo()
    {
        return array(
            'major' 	=> '1',
            'minor' 	=> '9',
            'revision'  => '2',
            'patch' 	=> '4',
  • Download The Related Patch

Be sure about your Magento’s version and then proceed with the downloading process.

  • Keep The Downloaded Patch File Under Root Directory

It is necessary to place the downloaded patch file directly into the root directory as to execute them at the same place.

PATCH_SUPEE-10415_CE_1.9.2.4_v1-2017-11-27-06-51-32.sh
app
cron.php
downloader
errors
favicon.ico
index.php
js
lib
mage
media
pkginfo
robots.txt
shell
skin
var
  • Time To Execute The Patches
$ bash ./PATCH_SUPEE-10415_CE_1.9.2.4_v1-2017-11-27-06-51-32.sh

Check if the patch can be applied/reverted successfully…
The patch was applied/reverted successfully.

 

  • Verification And Flushing of Magento Cache as well as Opcode Cache

To flush Magento caches, locate “System” in Magento backend and under that “Cache Management”. From there you can flush Magento cache and CSS/JS caches.

Make sure flush the cache after patching if you prefer using PHP opcode caches, or else the code will consistently run from caches.

Hence, this is the way you can install the patch with SSH. Now, let’s consider the following process for installing the SUPEE-10415 without SSH.

Easy installation process without SSH

  • Before you get started, disable the Magento’s compiler.
  • Installing Magento Patches Through FTP/sFTP or File Manager

Simply replace the files to apply the patches. If you have changed any of the Magento’s core files, you cannot use this process blindly. For the changes like these, you should re-apply to patched files, or else you will lose these changes.

app/Mage.php
app/code/core/Mage/Adminhtml/Block/Report/Review/Detail.php
app/code/core/Mage/Adminhtml/Block/Report/Tag/Product/Detail.php
app/code/core/Mage/Adminhtml/Block/Review/Add.php
app/code/core/Mage/Adminhtml/Block/Review/Edit/Form.php
app/code/core/Mage/Adminhtml/Controller/Action.php
app/code/core/Mage/Adminhtml/Model/LayoutUpdate/Validator.php
app/code/core/Mage/Adminhtml/Model/System/Config/Backend/Filename.php
app/code/core/Mage/Api/Helper/Data.php
app/code/core/Mage/Api/Model/Server/Adapter/Soap.php
app/code/core/Mage/Api/Model/Wsdl/Config.php
app/code/core/Mage/Api/Model/Wsdl/Config/Base.php
app/code/core/Mage/Core/Helper/String.php
app/code/core/Mage/Core/Model/File/Validator/Image.php
app/code/core/Mage/Core/etc/config.xml
app/code/core/Mage/Core/etc/system.xml
app/code/core/Mage/Customer/Model/Customer.php
app/code/core/Mage/Eav/Model/Entity/Attribute/Backend/Serialized.php
app/code/core/Mage/Log/Helper/Data.php
app/code/core/Mage/Rule/Model/Abstract.php
app/code/core/Mage/Sales/Block/Adminhtml/Billing/Agreement/Grid.php
app/code/core/Zend/Form/Decorator/Form.php
app/design/adminhtml/default/default/template/backup/dialogs.phtml
app/design/adminhtml/default/default/template/sales/billing/agreement/view/tab/info.phtml
app/design/adminhtml/default/default/template/xmlconnect/edit/tab/content.phtml
app/design/adminhtml/default/default/template/xmlconnect/edit/tab/design/image_edit.phtml
app/locale/en_US/Mage_Adminhtml.csv
app/locale/en_US/Mage_Customer.csv
js/mage/adminhtml/backup.js
lib/Varien/Filter/FormElementName.php

For the verification and flush of PHP Opcode cache, consider the same step which is used in the installation guide with SSH.

If still, you find any difficulties while installing the patch, feel free to contact our expert Magento developers at Elsner Technology.