Magento version 1.9.3.4 include patch SUPEE-9767 V2 which includes security patching for the checkout process.

For your current front-end templates to work with this patch you will need to include a form key value to a number of forms in the checkout process.

<?php echo $this->getBlockHtml('formkey') ?>

Load the templates below from your  app/design/frontend/<package>/<theme> directory and add the Form Key code above between the <form> and </form> tags on each.

The basic templates that will need upgraded:

  • /template/checkout/cart/shipping.phtml
  • /template/checkout/onepage/billing.phtml
  • /template/checkout/onepage/shipping.phtml
  • /template/checkout/onepage/payment.phtml

If persistant checkout is enabled:

  • /template/checkout/onepage/shipping_method.phtml
  • /template/persistent/checkout/onepage/billing.phtml

If you allow shippinng to multiple addresses:

  • /template/checkout/multishipping/billing.phtml
  • /template/checkout/multishipping/shipping.phtml

Magento

Magento is a feature-rich ecommerce platform built on open-source technology that provides online merchants with unprecedented flexibility and control over the look, content and functionality of their ecommerce store.

About Magento Ecommerce · Magento Posts

Related Magento Posts

Aheadworks switch to subscription model

Aheadworks will be removing Composer keys and download access for existing customers and switching entirely to a subscription model. From February 2022 Aheadworks announced it... March 2022 · Magento

Magento Store Hierarchy

Before you start building-out your Magneto website you must first plan your store hierarchy. Magento's hierarchy is referred to throughout your store's configuration. Each store... February 2022 · Magento

Optimising Magento 2 in Easy Steps

Some (fairly) simple step-by-step instructions to ensure your Magento 2 store is running the best it can. While most of these options should only require... December 2021 · Magento

More Magento Posts...