JeroenBoersma

Amasty Product Feed - Local file disclosure

• Affects: Amasty (Product-) Feed (Magento 1)
• Date: 2016-07-20 (updated: 2016-07-26)
• Author: Jeroen Boersma

Affected versions:

jhoelzl

# Add this command to your .bashrc and then use "gm" in your Magento modman folder to create a modman mapping file

# Generate modman
function gm() {
	for i in `find . -type f | grep -v \.git/ | grep -v "^.$" | grep -v "modman" | sed 's/\.\///'`; do echo -e ${i}'  '${i};done > modman
}

raybogman

<?php
/**
 * SupportDesk_FixAcl.php v1.1
 * SupportDesk (www.supportdesk.nu)
 * 10/7/2015
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * It is available through the world-wide-web at this URL:

schmengler

#!/bin/bash
# Patch apllying tool template
# v0.1.2
# (c) Copyright 2013. Magento Inc.
#
# DO NOT CHANGE ANY LINE IN THIS FILE.

# 1. Check required system tools
_check_installed_tools() {
    local missed=""

navarr

<?php

if (empty($crumbs) || !is_array($crumbs)) {
    return;
}

$_crumbItems = array();
$_crumbCount = 1;
$_crumbTotal = count($crumbs);

fbrnc

catalogrule/observer::dailyCatalogUpdate called by the catalogrule_apply_all cron job will delete block caches every night:

https://github.com/OpenMage/magento-mirror/blob/magento-1.9/app/code/core/Mage/CatalogRule/Model/Rule.php#L319

What's wrong with this?

1. It shouldn't do this if there are no catalog rules in the first place.
2. Even if there are catalog rules it should check if the current execution time is close to any job's start or stop date and only flush caches then.
3. The configuration (https://github.com/OpenMage/magento-mirror/blob/magento-1.9/app/code/core/Mage/CatalogRule/etc/config.xml#L102-104) basically only allows adding caches, but not removing any caches.
4. Cleaning caches - if actually required - should happen after reindexing. It's not safe to assume that noone will hit any affected page after it was cleaned and before the indexers are done.

aleron75

<?php
require_once 'abstract.php';

class Mage_Shell_CheckImages extends Mage_Shell_Abstract
{
    const CATALOG_PRODUCT = '/catalog/product';

    const CACHE = '/cache/';

    protected function _glob_recursive($pattern, $flags = 0)

avoelkl

How-to

Add --single-transaction and --quick to your mysqldump command.

--single-transaction

sets the isolation mode to REPEATABLE READ and starts a transaction before dumping data. useful for InnoDB tables, dumps the consistent state without blocking any applications.

--quick

tobi-pb

#!/bin/sh

wget http://dev.mysql.com/get/Downloads/MySQL-5.6/mysql-5.6.24-osx10.9-x86_64.tar.gz
tar xfvz mysql-5.6*

echo "stopping mamp"
sudo /Applications/MAMP/bin/stop.sh
sudo killall httpd mysqld

echo "creating backup"

colinmollenhour

<?php
/**
 * Magento
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.txt.
 * It is also available through the world-wide-web at this URL:
 * http://opensource.org/licenses/osl-3.0.php