Security update

[jhnstcks]

If the security update dosnt require any SQL updates, I think it would be better to supply everyone with an update patch zip file with the affected files/folders so we can just upload those files rather than trying to explain how to update each indivdual file.

What does everyone else think?

[thehandlestudio]

Yes good thinking, I think I found a problem with the updates as it is which I have put on the bug tracker.

[raceway]

That sounds like a good idea to me.

[rocky]

The blog post here outlines the changes made to which files. I've attached a zip of all the changed files for convenience. I included the install directory too, since it will automatically update the version number in config/settings.inc.php for you, or you can change it to '1.3.1.1' yourself.

EDIT: I just found out that manually changing the version number of PrestaShop will cause problems in future PrestaShop updates. You must run the installer and let it update it for you.

prestashop_1.3.1_changes.zip

[Bandai]

thanks for the zip file! this makes it much faster.

[Cell Nerds]

Great Call A+++++ TY

[Lilja]

This doesn't work for me, say's that config/settings.inc.php can't be found.

[rocky]

You shouldn't copy these files into a separate directory. You should overwrite your existing PrestaShop files, or manually add the changes if you have modified any of the files. The file config/settings.inc.php must exist on your site, otherwise PrestaShop couldn't find your database.

[Lilja]

You shouldn't copy these files into a separate directory. You should overwrite your existing PrestaShop files, or manually add the changes if you have modified any of the files. The file config/settings.inc.php must exist on your site, otherwise PrestaShop couldn't find your database.

Ive done that, except manually adding the changes.

I have verified that the file settings.inc.php is in the config folder and both the folder and file have read/write(modify) permisson. The info in the file seems to be right.. correct DB, user, pw, ip address= localhost(my sql hosted on same computer)

Any ideas?

[rocky]

I've never had a problem before with the installer not finding config/settings.inc.php when it does exist. I can't think of any reason why that would happen.