Magento SUPEE-6788 and Its Potential Impact on Your Extensions
Murli Pawar
Technology Strategist | VP - Technology | IIM Alumnus | Leading with Purpose
If you are curious about the latest Magento Security Patch SUPEE-6788 and the influence it is going to have on the performance of some of the extensions, then this post is for you.
You might be aware that Magento recently released Security Patch SUPEE-6788 for its customers, which fixes more than 10 security related issues in Magento such as information leak susceptibility, remote code execution, etc. However, this latest patch is a little different from earlier patches, since it will most likely break one or more than one of your extensions.
Patches released earlier could be installed and were ready to go with a simple SSH command, but this latest patch requires a bit more attention.
Since the patch fixes more than 10 different security related issues that are firmly embedded in the Magento CMS, it calls for structural changes to the CMS, which will have a great impact on the functionality of your Magento extensions.
Let’s find answers to some of the common questions surrounding Magento’s latest security patch:
Is the security patch live yet?
It is announced to be released on October 28, 2015 (today) for community as well as enterprise edition.
Will there be issues with the extensions after the security patch is installed?
Extensions not using the admin routing at all, will not face any performance issues due to the latest patch. However, extensions that are using admin routing will be affected, which can be handled in certain ways.
What should be done?
- First of all, to ensure that the patch SUPEE-6788works properly, you should first check and implement all previous security patches, before implementing this new security patch.
- Second step should be to install the security patch as soon as it becomes live. This is an important step, since it will protect your Magento store from automated attacks.
- Next step would be to update your extensions after latest patch has been installed. Updated extension can be easily downloaded into your account.
If you do not know how to do all this by yourself it is highly recommended that you take help from experts to check your site. Not taking professional help may even lead to crashing of your online store, which can have a huge impact on your business.