Hot Patches for AbleCommerce 7.0.2

Applies To: AbleCommerce 7.0.2 build 11659

Last Updated On:  1/06/2010

 

 

Hot Patches available for AbleCommerce 7.0.2

The table below represents notable issues that have been identified after AbleCommerce 7.0.2 build 11659 was released.  As new issues arise, a patch or code change will be available  to correct the issue.  You can review the Brief Description for each issue to find the applicable fix.  For minor issues, a separate patch will not be available, instead, they will be corrected in the next release.

IMPORTANT:  Supported patches are below. However, they are intended to correct only the problem that is described. Apply it only to systems that are experiencing this specific problem. If you are not severely affected by this problem, we recommend that you wait for the next maintenance release.  Always patch any issues related to Security as soon as possible.  See issue ID 7887.

To find your AbleCommerce build number, go to Help > About from the merchant administration page.
 

 

Legend

  • Bug ID # = Use this number as a reference to the issue.

  • Severity = This describes the impact of the bug, or it may be a product enhancement.

  • Component = The area of AbleCommerce that was affected by the issue.

  • Brief Description = The title of the Bug Report as entered by the user.  

Known Issues in 7.0.2 (build 11659)

Bug ID

Severity

Component

Brief Description

7825

Latest version of the CommerceBuilder.DLL

Visit the above link.  Find the newest file in the "Attachments" section.  Right-click to download.  Extract the zip file which includes a new CommerceBuilder.DLL.  Copy this over the existing one located in the \BIN\ folder.  It may be necessary to temporarily stop the web service during the copy process, if the website is active.

Fixes only bugs
:  7791, 7814, 7836
(see below for details of each bug)

 

Review the full list of issues below to see if you are experiencing any of these symptoms.  The Commercebuilder.dll only corrects some of these issues.  Additional patches are linked below.
 

7791

blocker

API

ISSUE:

CategorySearch and AdvancedSearch pages throw error with SQL2000

SYMPTOM:

When using 'Category Grid' or 'Category Grid with Add to Basket' content scriptlets with a category page, advanced search, or product finder, and you have an SQL 2000 database, you will see this error after upgrading to version 7.0.2

[[ConLib:SearchPage]] The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator.

TO FIX: download latest Commercebuilder.dll.  See first issue ID 7825 for a link to download and instructions to update.  The CommerceBuilder.DLL may be updated frequently.
 

7795

normal

API

ISSUE:

Search in store header does not function when search sidebar is in right column

SYMPTOM:

If the 'Category Search' scriptlet is used in the right-column, the search form within the header no longer works.

TO FIX: download patch which includes a new CommerceBuilder.Web.DLL version 7.2.11671.0.  Copy this over the existing one located in the \BIN\ folder.  It may be necessary to temporarily stop the web service.
 

7804

blocker

Installation

ISSUE:

Installing to .NET Framework Version 3.5 may generate a license key warning

SYMPTOM:

If you install AbleCommerce 7.0.2 to a server running 3.5 Asp.Net, which does not include all files from the AJAX Extensions 1.0, you will get a license key error when accessing the install page.  It will be a friendly message letting you know the AbleCommerce key is missing.

TO FIX: download a new web_NET35.config file or edit your existing one.

 

7813

normal

Admin UI

ISSUE:

Manage Subscriptions: URL to order needs to include order number

SYMPTOM:

From the Manage Subscriptions page, we link to the order.  The URL is missing the order number.  It can be problematic if the order number and order ID are out-of-sync.

TO FIX:  download patch which includes an updated file to replace ~\Admin\People\Subscriptions\ManageSubscriptions.aspx

7814

normal

Admin UI

ISSUE:

Zones that Exclude Selected Provinces or Countries are not working

SYMPTOM:

Setup a zone to exclude a state or country.  If you assign the zone to a shipping method, you will not be able to get shipping to display on checkout.

TO FIX: download latest Commercebuilder.dll.  See first issue ID 7825 for a link to download and instructions to update.  The CommerceBuilder.DLL may be updated frequently.

7836

normal

Admin UI

ISSUE:

adding digital good products with an option from admin will add ALL digital good files

SYMPTOM:

When you edit an order via admin, and add a digital good product with options, it will add every digital good file (for every option) to the order.

TO FIX:  download latest Commercebuilder.dll.  See first issue ID 7825 for a link to download and instructions to update.  The CommerceBuilder.DLL may be updated frequently.

7839

normal

Storefront

ISSUE:

shipping estimator fails to list provinces for Canada

SYMPTOM:

The problem can appear when countries are deleted from the store.  After deleting, ff the first country in dropdown list of the shipping estimator has states/provinces, these will never be loaded correctly.

TO FIX:  download patch which includes an updated file to replace ~\Website\ConLib\BasketShippingEstimate.ascx.cs

7847

possible blocker

Storefront

ISSUE:

ability to disable the new NoBot control

SYMPTOM:

Introduced at version 7.0.2, there is a NoBot control which is supposed to prevent attacks of the checkout page by automated robots.  In particular, the control was designed to inhibit the ability to enter multiple gift certificate numbers in quick succession.  Under certain conditions, this feature is triggered when it shouldn't be.  We do not yet know what server environment causes the issue but a message on the checkout page was shown indicating "Bot Activity Detected".

TO FIX:  download patch which includes two updated files to replace ~\ConLib\OnePageCheckout.ascx.cs and ~ConLib\OnePageCheckout.ascx

Download latest Commercebuilder.dll.  See first issue ID 7825 for a link to download and instructions to update.  The CommerceBuilder.DLL may be updated frequently.

After updating the files, edit the "Checkout Page" scriptlet.  Add the new property "DisableBots="false" so your scriptlet would look something like:

[[ConLib:OnePageCheckout DisableBots="false"]]

7851

critical

Storefront

ISSUE:

Ship to Multiple Destinations is not working under medium trust

SYMPTOM:

This issue prevents a user from checking out with products going to multiple destinations, but only in a very specific condition - if .Net Framework is set to run in medium trust.  

TO FIX:  download patch which includes two updated files to replace ~\admin\digitalgoods\digitalgoodsfiles.aspx.cs and ~\conlib\shipmultipage.ascx.cs

7883

normal

Storefront

ISSUE:

Category Search feature not working with pagination on second level of categories

SYMPTOM:

The product finder's narrow by category selection reverts to showing all products after the user selects a sub-category.

TO FIX: download patch which includes two updated files to replace ~\ConLib\CategoryGridPage.ascx.cs and ~ConLib\CategoryGridPage3.ascx

7887

security

component add-on

ISSUE:

possible exploit using FCKEditor

SYMPTOM:

The WYSIWYG component of FCKeditor allows arbitrary uploads without authentication.  The AbleCommerce code does provide an over-riding authentication so that only admin users can upload.  However, one case has shown a possible, but unverified, exploit in the editor.  To be safe, we are providing the latest version which appears to address the 'undocumented' security issue.  As with all security issues, they should be patched as soon as possible.

TO FIX: download patch which includes the lastest version of FCK editor.

  1. Find the \fckeditor\ folder at the top level of your installation.

  2. Delete the existing fckeditor folder.  If you want to keep a backup, make sure to place the backup in a location that is not accessible by a web browser.

  3. Place the updated "fckeditor" folder from the zipped patch into place.

 

7890

blocker

Admin UI

ISSUE:

Error when placing order through the admin

SYMPTOM:

Using the place an order feature through admin, select an existing user that has a different country then the default warehouse for the store.  When clicking the FIND button, you will get a an exception.

Exception of type 'System.Web.HttpUnhandledException' was thrown.; Cannot have multiple items selected in a DropDownList.

TO FIX: download patch which includes one updated file to replace  ~/Admin/Orders/PlaceOrder2.aspx.cs

8353

normal

integration

ISSUES:  

1) Paypal order paid but payment not recorded in AbleCommerce
2) Order ID is sent to Paypal instead of Order Number

TO FIX:  download patch which includes 3 new files to replace

~\PayPalExpressCheckout.aspx

~\PayPalExpressCheckout.aspx.cs

~\bin\CommerceBuilder.PayPal.dll

8654

critical

Shipping Provider

ISSUE:  USPS changes effective Jan 4th 2010

Some of the service names have been updated by the USPS.  Any services that have changed will no longer appear as an available shipping method in AbleCommerce.

TO FIX:  download the patch and review the Readme inside for further instruction.

 

 

Copyright © 1994 - 2023 AbleCommerce.com, All rights Reserved | Privacy Policy

A division of Able Solutions Corporation, headquarters located in Vancouver, WA