New Magento Security Patch (SUPEE-6285) – Install Immediately - security

I am new in magneto. my store var 1.7.0.2 need to update security patch(UPEE-6285).
I read many link without with ssl or without ssl install. but can't go with any one because i can't get backup my project and i want to go for easy steps can any one tell me easy steps for update security patch in magneto. I don't know what is ssh and how it run.
Please help me
Thanks

To learn how to install a patch check this link out: https://info2.magento.com/rs/magentoenterprise/images/Installing-a-Patch-for-Magento-Community-Edition.pdf
Easy way:
First create a backup then use Magento connect and upgrade your store to the latest Magento version by check for upgrades button. The latest version contains this security patch (SUPEE 6285) and another features all together.
update:
Upgrade using Magento connect on production server is not recommended, because you have to check extensions compatibility.

Related

Upgrading MariaDB on AWS Linux machine

I have a moodle site which runs on a linux AWS box and I'm trying to upgrade it. I need to have MariaDB 10.3 on there, and I currently have 10.2.10
I've followed the instruction for upgrading using yum from this webpage https://www.ryadel.com/en/mariadb-10-upgrade-10-3-without-losing-data-how-to/ and all goes fine until I get to Running Transaction Check and Running Transaction Check at which point I get the following
Transaction check error:
file /etc/my.cnf from install of MariaDB-common-10.3.27-1.el7.centos.x86_64 conflicts with file fr
om package mariadb-config-3:10.2.10-2.amzn2.0.3.x86_64
file /usr/lib64/libmysqlclient.so.18 from install of MariaDB-compat-10.3.27-1.el7.centos.x86_64 co
nflicts with file from package mariadb-libs-3:10.2.10-2.amzn2.0.3.x86_64
I'm not sure what to do now? Any help or pointers would be appreciated.
EC2 is not designed for database specifically
You seem to be installing and running your database on EC2 (what you call a linux AWS box), this means you can SSH into the instance and install software manually and carry out updates and edit configuration files and settings etc.
RDS is designed for Database
RDS also has other really convenient features like automatic version upgrade and maintenance window management.
If your situation allows I would suggest to use a tool designed for database instead of having to configure things manually. It will save you a lot of time and troubleshooting, it is also more secured.

Sharepoint 2013 installation

Can any one provide me the best practice for turning on/off the windows updates.
Do we need enable windows update by default as best practice in prod environment.
What I have done in my current new prod setup, I have installed all windows update till today in all server and done the necessary restart in the server.
Now I have disabled like below. Please correct me if I am doing any wrong so that I can learn new thing.
You really don't want to block updates all together on a production server as you will leave your system exposed to security issues.
However, as Microsoft is now pushing SharePoint CU's (Cumulative Updates) through this avenue, you don't want them to install automatically either as this could break your production SharePoint instance! You can set up your server to "download only" and then you can manually choose which updates to install.
Here is a really good article I'd recommend so you are more informed about what process you should follow that is the best practice for your organisation.
https://redmondmag.com/articles/2015/02/13/pushing-sharepoint-server-updates.aspx

How to fix an error message issue of security update available for my version of Drupal?

I can see this error message on Drupal admin panel.
There is a security update available for your version of Drupal. To
ensure the security of your server, you should update immediately! See
the available updates page for more information and to install your
missing updates. There are security updates available for one or more
of your modules or themes. To ensure the security of your server, you
should update immediately! See the available updates page for more
information and to install your missing updates.
I tried to no display error message on this page,
Home » Administration » Configuration » Development
But I see this error message now.
Is this a version update issue? It enables, please help me. Thanks
The message is shown by the update module. For what I know there are no configuration to disable this message. It is shown just for the users with the administer site configuration permission.
I think the only solution is to disable the update module.
If you use drush you can do:
drush pm-disable -y update
Usually in the development enviroment I keep enable the update module and I disable it in the production enviroment.
You should update Drupal and/or your installed insecure modules instead of trying to "hide" the message.
Check available security updates with drush: drush pm-updatestatus --security-only

Manage Products page is not working

I've installed SUPEE 6788 and from default, admin routing compatibility is "Enabled", all extensions work fine. However, when I "Disable" it, My Manage Products page is not working.
Does anyone know where this may be due to? Meaby I need also the update Magento to 1.9.2.2.?
Log out and login again and check if it works..
if not then check the status of SUPEE6788 in Magento Connect Manager.
One of your extensions is probably not compatible with the new patch. This is a comprehensive description of what the patch does and included is a link to extensions that are and aren't compatible with the patch. Hopefully there'll be an upgrade that will resolve your issue.
https://magento.stackexchange.com/questions/87214/how-to-check-which-modules-are-affected-by-security-patch-supee-6788

How to upgrade dotnetnuke with existing database table

I got a DOTNETNUKE project. I am new to DOTNETNUKE. My client has given me the files and folder with Database(say abc.mdf). I was said to upgrade their developed site from version 6 to latest version v7.0. The issue when upgrading is "How to map the latest version to existing Database?" ie: when I installed v7.0 in my system, it creates new database with 137 default tables. How am I supposed to map those 137 default tables, stored procedures, etc to existing database(abc.mdf) so that up-gradation happens easily with database.
I didn't find a proper solution for that..
Can anyone help me?
Thanks in advance.
No need to map any tables OR files from new version to old version. Just follow up below steps to upgrade DNN website from old to new one. Here is the reference link.
Download 7.4.0 - Version Upgrade file from here.
Extract downloaded Zip file to root of your existing old version of DNN website. It is replacing all your old files with new one.
Run your website.
When you run your website, it will be automatically redirect to Upgrade Wizard page.
Just provide your HOST Username/Password and Click on Install button.
Now it will start process of mapping your old database tables & store procedures with new one.
After complete the process to 100%, click on Visit Website button.
Done. Your website updated.
Please let me know if you have any questions.
DNN will do all that for you.
Extract the UPGRADE package over your existing site. Hit the site, login as host, run the Upgrade.

Resources