Magento Knowledge Base

Configuration (8)

How to change favicon in Magento

Magento favicon is changed at System > Configuration > Web > Design > HTML Head > Favicon icon. Click on Browse button and select favicon icon from your hard drive to upload.

[solution] Magento :: Changes not applied

When you stuck why your configuration changes have no effect in Magento, try the following steps: make sure that you have applied changes for correct Configuration Scope / store / store view and there are no overrides on lower level… Read the rest

How to edit Magento Maintenance page

Magento maintenance page design can be changed just like any other Magento error page. By default, it looks like the following: It is shown when your store is in Maintenance mode, you can read how to turn it on or… Read the rest

Securing Magento /admin/ by admin path change

Default Magento backend URL is set to /admin/ (i.e. http://www.example.com/admin/), it knows everyone, including bots and crackers, who brute-forcing it for weeks according to my logs. Recent Shoplift vulnerability (known by its SUPEE-5344 patch widely announced to public) indicated that… Read the rest

Solving Magento SSL errors (yellow padlock or exclamation mark)

Your connection is encrypted with 128-bit encryption. However, this page includes other resources which are not secure. These resources can be viewed by others while in transit, and can be modified by an attacker to change the look of the… Read the rest

Securing MAGMI Data Import Tool

MAGMI (Magento Mass Importer), popular Magento Data Import Tool, often is used without any protection in its default location (/magmi/web/magmi.php). Unsecure implementaion of this tool can be abused to gain full access to a Magento installation, especially taking into account… Read the rest

Restrict access to Magento /downloader/

We are noticing dynamic increase in robots/crawlers brute-forcing Magento’s /downloader/ locations, trying default admin user with various passwords (mostly dictionary-based) and other popular logins. We seen the bots are trying it continuously (in some cases for several months or years… Read the rest

Securing Magento Cacheleak, Backupleak and Sessionleak

Magento Cacheleak is an implementation vulnerability, result of bad implementation of web-server configuration for Magento platform. With such configuration web-server ignoring all or some .htaccess files shipped with Magento distribution or some directives from these files and therefor all private… Read the rest

Extensions (1)

Installing and Managing Magento Connect Extensions

Installing and Managing Magento Connect Extensions – training guide, focused on how to download and install Magento Extensions using Magento Connect Manager.

Fatal errors (7)

Class ‘Mage_Bbsnetaxept_Helper_Data’ not found in app/Mage.php on line 547

Problem description Magento WSOD or blank page is shown on attempt to save Shipping method with Trollweb/Bring extension. Saving shipping method or carrier in Magento fails with the following error: PHP Fatal error: Class ‘Mage_Bbsnetaxept_Helper_Data’ not found in app/Mage.php on… Read the rest

Call to undefined method Mage_Core_Controller_Request_Http::getInternallyForwarded()

Problem description The following PHP fatal error message appears on attempt to open Magento Backend after SUPEE-5344 patch installation: Call to undefined method Mage_Core_Controller_Request_Http::getInternallyForwarded() in app/code/core/Mage/Admin/Model/Observer.php on line 76 Cause getInternallyForwarded method is introduced in SUPEE-5344 patch. According to the… Read the rest

Magento Reset Password page is blank after SUPEE-6788

Problem description Reset password page is blank (Magento WSOD) or results in Fatal error after installing SUPEE-6788 patch or upgrade to Magento 1.9.2.2 version. It is possible to enter email address and request a new password, but clicking on the… Read the rest

PHP syntax error after SUPEE-7405 : unexpected [

Problem description After SUPEE-7405 patch Sales Order Management screen in Magento Backend is blank or the following error is reported in PHP error log: PHP Parse error: syntax error, unexpected ‘[‘ in app/code/core/Mage/Adminhtml/Helper/Sales.php on line 124 Cause SUPEE-7405 is prepared… Read the rest

Magento registration form does not work after SUPEE-6788

Problem description After SUPEE-6788 patch budnle or after upgrade to Magento 1.9.2.2 customer registration form does not work correctly. Submitting the form have no any results just like page is simply refreshed, new customer accounts are not created. Cause SUPEE-6788 Read the rest

Magestore Bannerslider not shown after SUPEE-6788 or Magento upgrade

Problem description After SUPEE-6788 patch budnle or after upgrade to Magento 1.9.2.4 Magestore Bannerslider sliders are not shown, hidden or page with sliders or results in SQL error like the following:SQLSTATE[42000]: Syntax error or access violation: 1064 You have an… Read the rest

SQLSTATE[42S22]: Column not found: 1054 Unknown column ‘`group`’ in ‘where clause’

Problem description After SUPEE-6788 patch budnle or after upgrade to Magento 1.9.2.4 Ess/M2ePro extension is not updating products or cron execution results in SQL error like the following:SQLSTATE[42S22]: Column not found: 1054 Unknown column ‘`group`’ in ‘where clause’ Cause SUPEE-6788 Read the rest

Localization (1)

Translate Magento as 1-2-3 ☆ Localization step by step

When it comes to localization routines, the most feasible thing is to not waste time on locating strings to translate to in numerous localization files. It can be easily achieved with Magento In-line translation feature.

Magento Connect (1)

Restrict access to Magento /downloader/

We are noticing dynamic increase in robots/crawlers brute-forcing Magento’s /downloader/ locations, trying default admin user with various passwords (mostly dictionary-based) and other popular logins. We seen the bots are trying it continuously (in some cases for several months or years… Read the rest

Installing and Managing Magento Connect Extensions

Installing and Managing Magento Connect Extensions – training guide, focused on how to download and install Magento Extensions using Magento Connect Manager.

Magento Maintenance (22)

How to turn Magento Maintenance ON or OFF

Magento has built-in Maintenance mode which is ready to use with simple minimalistic approach. For advanced features, like switching maintenance mode on per-store-view basis from Magento Backend, please skip to the next section. Magento maintenance mode is controlled by maintenance.flag… Read the rest

How to apply SUPEE-3762 without SSH

August 31, 2015: We are receiving notices about attacks to Magento stores via /index.php/api/v2_soap/index/ URL exploiting issue in Zend Framework used in 1.9.0.0 and 1.9.0.1 versions. Attacks are coming from 178.62.128.0/17 network block (Digitalocean) and user-agent logged as [email protected] If… Read the rest

How to completely disable Magento extension

Sometimes you may need to temporarily disable or turn off some Magento extension/module completely due to misbehave or other reasons, so it can not affect Magento installation and site can function just let the module never existed. Warning Some users… Read the rest

Magento Malware cleanup: function LCWEHH(XHFER1)…

October 17, 2015: We are receiving reports about massively infected Magento sites with GuruIncsite Javascript malware function LCWEHH(XHFER1)….. On October 20, 2015 Magento sent announce to all Magento installations via news feed in backend: New Malware Issue. Make Sure You… Read the rest

Solution for Magento’s “Service Temporarily Unavailable”

Your Magento store shows “Service Temporarily Unavailable” page when it is switched into Maintenance mode: Related PostsHow to turn Magento Maintenance ON or OFFHow to edit Magento Maintenance page

How to install SUPEE-6788

October 27, 2015: New Magento Security Patch (SUPEE-6788) – Install Immediately Today, we are releasing a new patch (SUPEE-6788) and Community Edition 1.9.2.2 to address 10+ security issues, including remote code execution and information leak vulnerabilities. This patch is unrelated… Read the rest

How to edit Magento Maintenance page

Magento maintenance page design can be changed just like any other Magento error page. By default, it looks like the following: It is shown when your store is in Maintenance mode, you can read how to turn it on or… Read the rest

How to install SUPEE-6788 without SSH

October 27, 2015: New Magento Security Patch (SUPEE-6788) – Install Immediately Today, we are releasing a new patch (SUPEE-6788) and Community Edition 1.9.2.2 to address 10+ security issues, including remote code execution and information leak vulnerabilities. This patch is unrelated… Read the rest

How to apply SUPEE-5344 and SUPEE-1533 without SSH

Recently released announce regarding Magento vulnerability disclosed by CheckPoint urges Magento patches SUPEE-1533 and SUPEE-5344 installation. The patches are available for download at MagentoCommerce site:https://www.magentocommerce.com/products/downloads/magento/ To test if your store is vulnerable use our Scan your store button in sidebar…. Read the rest

How to install SUPEE-7405 without SSH

January 20, 2016: New Magento Security Patch (SUPEE-7405) – Install Immediately If you have SSH access, it would be more simple to apply the patch via SSH. If you have no SSH access to apply the patch, you can simply… Read the rest

Troubleshooting (3)

Magento :: “Could not determine temp directory, please specify a cache_dir manually”

Symptoms Magento throws “There has been a problem processing your request” error. The following error is logged under var/reports/ or shown on any page: Cause Magento can not write cache to var/cache/ and var/tmp/ folders under Magento root directory. Either… Read the rest

Pages and emails broken after SUPEE-6788 patch to Magento

Problem description Some blocks are not shown on CMS pages, home page, category pages, landing pages in your Magento installation after installing SUPEE-6788 patch, page layout is broken. Some transactional emails, order notification emails are broken, incomplete or have some… Read the rest

Customer login form does not work after SUPEE-6788

Problem description After installing SUPEE-6788 or upgrade to Magento 1.9.2.2 customers can not login anymore. The login page is loaded correctly, however after filling in login name / email and password submitting the form does not result in success authorization…. Read the rest

Class ‘Mage_Bbsnetaxept_Helper_Data’ not found in app/Mage.php on line 547

Problem description Magento WSOD or blank page is shown on attempt to save Shipping method with Trollweb/Bring extension. Saving shipping method or carrier in Magento fails with the following error: PHP Fatal error: Class ‘Mage_Bbsnetaxept_Helper_Data’ not found in app/Mage.php on… Read the rest

Call to undefined method Mage_Core_Controller_Request_Http::getInternallyForwarded()

Problem description The following PHP fatal error message appears on attempt to open Magento Backend after SUPEE-5344 patch installation: Call to undefined method Mage_Core_Controller_Request_Http::getInternallyForwarded() in app/code/core/Mage/Admin/Model/Observer.php on line 76 Cause getInternallyForwarded method is introduced in SUPEE-5344 patch. According to the… Read the rest

Magento Reset Password page is blank after SUPEE-6788

Problem description Reset password page is blank (Magento WSOD) or results in Fatal error after installing SUPEE-6788 patch or upgrade to Magento 1.9.2.2 version. It is possible to enter email address and request a new password, but clicking on the… Read the rest

PHP syntax error after SUPEE-7405 : unexpected [

Problem description After SUPEE-7405 patch Sales Order Management screen in Magento Backend is blank or the following error is reported in PHP error log: PHP Parse error: syntax error, unexpected ‘[‘ in app/code/core/Mage/Adminhtml/Helper/Sales.php on line 124 Cause SUPEE-7405 is prepared… Read the rest

Magento registration form does not work after SUPEE-6788

Problem description After SUPEE-6788 patch budnle or after upgrade to Magento 1.9.2.2 customer registration form does not work correctly. Submitting the form have no any results just like page is simply refreshed, new customer accounts are not created. Cause SUPEE-6788 Read the rest

Magestore Bannerslider not shown after SUPEE-6788 or Magento upgrade

Problem description After SUPEE-6788 patch budnle or after upgrade to Magento 1.9.2.4 Magestore Bannerslider sliders are not shown, hidden or page with sliders or results in SQL error like the following:SQLSTATE[42000]: Syntax error or access violation: 1064 You have an… Read the rest

SQLSTATE[42S22]: Column not found: 1054 Unknown column ‘`group`’ in ‘where clause’

Problem description After SUPEE-6788 patch budnle or after upgrade to Magento 1.9.2.4 Ess/M2ePro extension is not updating products or cron execution results in SQL error like the following:SQLSTATE[42S22]: Column not found: 1054 Unknown column ‘`group`’ in ‘where clause’ Cause SUPEE-6788 Read the rest