php - Joomla 1.7.0 Security fixes (Upgrade) -


i have shopping cart platform joomla 1.7.0 , vm2.0.6.is there option update versions manually (like files , db tables).i can't upgrade normal joomla upgrade bcoz version customized .so 1 can advise how security issues on joomla 1.7.0 fix ? manual files updates ?

any response valuable recourse appreciate.

thanks in advance.

you need find hacked files, , apply hacks new version of joomla.

the procedure quite long.

  • identify exact joomla version using i.e. 1.7.3
  • download new copy

  • make backup of entire joomla site + database (you never know)

    tar czf ../joomcustom17.tgz *

  • put project under versioning: either svn or git do, i'll write example git:

    git init git add * git commit -m "initial"

  • extract new copy of joomla on it:

    tar xzvf ../joomla_1_7_3.tgz

  • and commit again

    git add * git commit -m "base 1.7.3"

    now have basic 1.7.3 version files added it. want diff original installation, create , checkout branch , name core17, extract initial backup on it, , commit again: contain core changes.

    git checkout -b core17 tar xzf ../joomcustom17.tgz git commit -m "customised 1.7.3"

now have standard joomla 1.7.3 installation several files in master branch, , core hacks in core17 branch.

 > git diff master..core17

and presented core changes.

you might want use high level tool view diffs quickly. see link below.

you absolutely need document these changes. these called "core hacks" , bad practice . absolutely need keep list explaining why applied future reference. great moment find out if can replace template overrides (in case views); see if can obtain same functionality plugin or maybe overriding core class.

once have nice picture of core changes, you're ready proceed further. it's time update joomla, switch master branch, update joomla latest version, commit. merge master, solve conflicts, , might have updated version core hacks.

it's keep core hacks separate branch next time need update easy 1,1,2,3,5,8,13.

be sure make backups , commits proceed wrong command or right command on wrong branch , can start on scratch.

document work proceed. references you:

http://git-scm.com/book/en/git-branching-basic-branching-and-merging

git visual diff between branches

hope helps... it's not difficult it's annoyingly long. remember: it's fault, , price pay hacking core.


Comments

Post a Comment

Popular posts from this blog

php - Why I am getting the Error "Commands out of sync; you can't run this command now" -

the documentation of error mentioned in title says if commands out of sync; can't run command now in client code, calling client functions in wrong order. this can happen, example, if using mysql_use_result() , try execute new query before have called mysql_free_result(). can happen if try execute 2 queries return data without calling mysql_use_result() or mysql_store_result() in between. from here: http://dev.mysql.com/doc/refman/5.0/en/commands-out-of-sync.html but in first query not fetching data mysql database, inserting. , in second query getting data database. here code $connection = mysqli_connect("localhost","username","password","tbl_msgs"); if(mysqli_connect_errno($connection)) { die("failed connect mysql: " . mysqli_connect_error()); } $query = "insert users (total_comments, total_views) values ({$total_comments}, {$total_views});"; $query .= "insert msgs (no...
Read more

linux - Does gcc have any options to add version info in ELF binary file? -

i mean whether gcc can insert source code version infor elf binary section or similar. not want change source file, add info gcc option in makefile. you can emit version info text file, turn text file object file statically link executable. the first step simple have write code: script or write version info in format plain text file. write makefile rule produce version.o version.txt, using objcopy . you'll have object file 2 useful symbols defined in it: beginning , end of textual version info. add generated object executable, , you'll able access version 2 ways: running strings on binary, or writing code in application print version string (you'll need declare start , end symbols variables in header file).
Read more

java - Are there any classes that implement javax.persistence.Parameter<T>? -

i'm using named queries fetch entities database using jpa , hibernate , came across puzzling me: how come there no default implementations of javax.persistence.parameter interface? i rather impressed how @staticmetamodel used criteriabuilder in jpa2 meaning type safety , don't have mess around setting string names. wanted apply similar of jpa1 ejb's i'm working on: dealergroup_.class: public dealergroup_ { public parameter<integer> id = new parameterimpl<integer>("id"); /// etc... } dealergroupfacade.class: // ... public dealergroup fetch(integer id) { typedquery<dealergroup> query = em.createnamedquery("dealergroup.fetchbyid", dealergroup.class); query.setparameter(dealergroup_.id, query); return query.getsingleresult(); } // ... i surprised find there no implementations of parameter interface - of course, implement myself absence makes me suspicious may mistake using in way? should implementing parameter...
Read more