Important NoteService Pack 1 contains over a hundred files modified to help prevent XSS (Cross Site Scripting) attacks. There are no known cases of any ProductCart stores being compromised by XSS, but we highly recommend installing this update if you cannot upgrade all the way to v5 at this time.
Service Pack 1 for ProductCart v4.7 was released on 06/6/14, and addresses known issues found in ProductCart v4.7 between the initial release and 6/6/2014. Please note that Service Pack 1 does not contain new features, rather it is a "roll up" of patches that have been frequently reported by customers (many of which were already published to the "Just In" section of the ProductCart Support Center). A new version of ProductCart, ProductCart v5 has already been released and is a complete overhaul with tons of new features. We highly recommend upgrading to v5, which is no additional cost to customers enrolled in the Support and Updates Plan, and is available via the "Check for Updates" in your control panel.
Do you need it?
If your ProductCart version number is 4.7 and contains "SP1" (Service Pack #1), then you do not need this patch. Otherwise, you need to apply it to your store. If you purchased ProductCart or updated from a previous version after 06/6/2014, you likely do not need this service pack. If you are already running ProductCart v5, then do not install this update. Check the version number to be sure.
Service Pack 1 requires that you first update to v4.7. That is, it is not a cumulative service pack. This is because many stores customize their files, and we therefore only include the latest file changes, so the chance of file conflicts with customized files is lower.
Downloading the Updated FilesYou can download Service Pack 1 for v4.7 by using the "Check for Updates" feature in your ProductCart Control Panel. Depending on the version of ProductCart that you are using (Standard vs. Build To Order) and on the add-on's installed on your store, the Update Management System will prompt you to download the correct file.
Unzipping the Downloaded Files
- Unzip the files to a new directory on your desktop (e.g. "v4.7 SP1 Files").
- Do not copy the unzipped files onto an existing set of ProductCart files.
- If you need to synchronize customized files, see Synchronizing customized files
- If you want to have a copy of the entire ProductCart folder on your desktop, including the latest files, download the store to your desktop after you have finished the update process.
Performing the update
Parent Paths Enabled vs. Parent Paths Disabled
Please select the correct update files depending on the version of ProductCart that you are running. Specifically, if you are running ProductCart on a server that has Parent Paths Disabled, please use the files contained in the "Parent Paths Disabled" folder. Otherwise, use the files contained in the "Parent Path Enabled" folder, which is the most common scenario.
If you are unsure of which version you are running, look at the version number in the Control Panel start page ("menu.asp"). If it includes the letters "PPD", then you are using the "Parent Path Disabled" version of ProductCart.
Synchronize overwritten files
One commonly modified files is "languages.asp". This file is included in this update. If you made changes to this file you will need to merge them with the version contained in this download. That said, there may be files that you customized and that are included in this Service Pack. Please see: Synchronizing customized files.
Step 1 - Back up your store
If you haven't already done so, back-up your store.
Step 2 - Turn off your store
Log into your Control Panel and select General Settings > Store Settings Enter a descriptive message in the field Message displayed when store is off. Select Turn store off, then click on the Update button. This ensures that customers do not browse the store while you are updating it.
Step 3 - FTP new files to your server
Upload the files to their respective folders, overwriting the existing files. For instance, you will update the contents of the "pc" subfolder on your Web server with the files contained in the "pc" subfolder in the zip file that you have downloaded from the ProductCart Update Management System.
Please note that the "pcadmin" folder has likely been renamed on your store. We recommend that you rename the same folder in the update files locally on your computer so that when you FTP the files there is no chance that a new "pcadmin" folder is created, which would mean that some of your store files are not being updated.
DO NOT delete any of the files that are currently on your Web server.
Confirm successful transfer
FTP transfers sometimes fail. Make sure that once the process has finished, your FTP client reported a success message. Most FTP programs have a way to show you whether some files were not uploaded successfully. If that happens, make sure to upload them again until all files have been uploaded successfully. For example, Filezilla separately reports "Failed Transfers" and "Successful Transfers". The "Failed Transfers" tab should be empty.
Step 4 - Update the Store Database
The database will not be updated with this ProductCart update. When you log into the Control Panel after uploading the files to the Web server, you will simply be redirected to a script that updates the version number (adding “SP1” to it in order to indicate that Service Pack 1 has been installed).
Step 5 - TO DO List
A message will confirm that the version number have been updated. If there are any "To Do" items, they will be mentioned here. One important To Do item is the following:
Step 7 - Turn your store back on
When all To Do items have been completed, you can now turn your store back on and verify that the storefront is working properly. We recommend that you place at least one test order to go through the entire checkout process.
New version number (service pack)
Your ProductCart store version number after applying this patch with include "SP 1" to indicate that you applied Service Pack 1 to your ProductCart v4.7 installation.