SUPEE-8167: New Patch for PayPal Instant Payment Notification (IPN) Changes. Upgrade to 188.8.131.52 or SUPEE-8167 by June 30, 2017 to Avoid Service Disruptions – 6/13/2017
As of June 30, 2017, PayPal Instant Payment Notifications will no longer allow you to use HTTP to post messages back to PayPal for verification. To comply with these changes, all merchants using PayPal must upgrade to Community Edition 184.108.40.206 or apply the SUPEE-8167 patch. Updates must be in place by June 30, 2017 to avoid any service disruptions.
If you have SSH access, it would be more simple to apply the patch via SSH.
If you have no SSH access to apply the patch, you can simply upgrade your installation to Magento 220.127.116.11 version which includes all the latest security patches (SUPEE-5344, SUPEE-5994, SUPEE-6285, SUPEE-6482, SUPEE-6788, SUPEE-7405, SUPEE-8788, SUPEE-9652, SUPEE-9767). If Magento upgrade is not possible in the moment due to some reason you still can apply the patch via FTP/sFTP upload as shown in this article.
If you wish to save time and have us to install these patches for you, simply click here to order installation.
- Disable Magento Compiler and clear compiler cache
Applying Magento patches via FTP/sFTP or FileManager / File Upload
To apply patches in this way we simply replace changed files. This way can not be used blindly if you or your developers have changed any core Magento files. Such changes should be re-applied to patched files, or you loose these changes.
Note: To the moment, the patch have no any dependencies and can be installed any time with any set of installed patches or without any patches.
The following file is changed by SUPEE-8167:
To install the patch via FTP/File Upload
- select patch bundle archive corresponding to your Magento version from the table below and unpack it
- upload all files and folders to Magento root directory of your store, replacing all files
Downloads for other versions added to table on demand when we patch certain version via file upload for the first time.
Check if your cURL PHP library have TLS1.2
PayPal switching to TLS1.2 only on June 30, so it is important to verify that your Magento still will be able to connect to PayPal. Navigate to PayPal payment settings page in Backend and check if you have warnings as described in
cURL php5 module update in Magento for PayPal changes by June 30th, 2017
Verification and flush of Magento PHP opcode cache
Flush Magento cache: Navigate in Magento backend to System > Cache Management and click on Flush cache button.
If you use PHP opcode caches (OPCache/APC/XCache/eAccelerator) make sure to flush it after patching (or restart webserver), otherwise code will continue to run from caches.
Test that your store is working.
If you have any difficulties with applying the patches please let us know in comments, so we can find the solution together.
Posted in: Magento Maintenance