Al Brookbanks

@havenswift-hosting

Fantastic!!

The best way to secure your site is to upgrade it to the latest version. If you delete everything apart from the files and folders in the upgrade instructions and malicious content should be removed. Sorry that you've been having to deal with this.

Sorry about this one. It's fixed in 6.5.5.

I'll message via email.

Hi Dave, so long as you can get us the validation file we can do that for you via support. More info here: https://www.cubecart.com/technical-support I hope we can work with you.

Hi Dave, What part of the ApplePay setup are you struggling with? You have extra steps to verify the domain.

Yes

Whats the problem with webp?

This release of CubeCart not only resolves a number of stability issues found in the previous version but patches a minor security vulnerability. We are grateful and thankful to Julio Araujo for reporting this so clearly and responsibly. The security patch (GitHub issue #3570) prevents malicious .phar type files from being uploaded via the back office of the store. Please note that a bad actor would need to have successfully authenticated into the back office in order to take advantage of this vulnerability. On those grounds we do not consider this to be a significant threat. To patch this vulnerability please either upgrade to CubeCart 6.5.5 or amend the code in the security patch linked above. Download: CubeCart-6.5.5.zip

Thanks @bsmither

Did you see this? https://github.com/cubecart/v6/issues/3557 There is a code fix there. This release has been quite a dog. I'll have to get a new release out soon but I'm having to wait on something...

I don't know which scenario matters for this to be complete honest. There's no reason why a customer shouldn't be able to complete 3DS. I think your choices look sensible.

Sorry Frank. The release is new and I've been tied up on support all day. Restoring a backup is a good plan for now. I haven't come across any stores with this problem yet using the files I've linked to in this thread.

No other changes in this version would affect the calculation.