Upgrade PrestaShop security release july 30, 2015

[elianto100]

I have just done on a web site (version 1.6.0.14) the security modification release on july 30 as suggested in this page

https://gist.github.com/Shudrum/27fc534de69c96617280

 

After the modification, we have encontered an error when we try to send a message from an order details in the administration.

When we try to send a messagge to a client we have this error:

 

 

I have solved the problem replacing line 617 in AdminOrdersController.php

 

$customer_thread->token = Tools::passwdGen(12);

 

with

 

$customer_thread->token = Tools::passwdGen(12,'RANDOM');
 

Questions:

1) Does any body else encotered the same problem?

2) Someone can confirm me that the solution I used is correct?

 

Thank you in advance,

Regards

Stefano Oggioni

[bellini13]

You should not need to make the change in AdminOrdersController.php.  This could mean that you did not properly updated the Tools.php class

[trevorgilligan]

there is a new paypal security upgrade with link to here: http://addons.prestashop.com/en/1748-paypal.html my issue is i dont want to install a new paypal as i have made changes to my existing one, however, i would like to know what changes are made so i can make them myself... any ideas anyone? 

[bellini13]

download the latest version and use a program like winmerge to compare the 2 modules to each other.  differences will be highlighted and you can decide what to do