SUPEE-6788 - All modules that show products on front page aren't working

[Derco]

Hi.

I've instaled the SUPEE-6788 patch, and now all modules that i have on home page that show products aren't working.

To install the patch i needed to move the files i have under pkginfo (mage_all_latest) to another folder (i've created a backup folder)

After this i've managed to install the patch without any problems.

But now, in the positions i have sliders or tabs with products nothins is showed.  I've allready done the easy things,( refresh cache, re-index) but nothing worked.

Do anyone had this issue allready?

I'm using Galio template from Plaza Theme with Magentothem extensions.

Thank you

[lukefiretoss]

Similar issue with the patch, site was updated yesterday but running into 403 permission issues now.

http://new.radiatorworks.com/

[FootshopAndy]

Hi @Derco,

If these are using blocks to pull the content in, I believe you have to add the blocks to a whitelist now: http://www.awesomescreenshot.com/image/703151/1ba9b90f777c412a8fd82380c9899b1c

Hope that helps.

[chiefair]

Contact your module developer for the fix on this. Certain items need to be added to a whitelist. Per the Magento notice on changes:

APPSEC-­-1057, template processing method allows access to private information
Magento now includes a white list of allowed blocks or directives. If a module or anyone uses variables like {{config path=”web/unsecure/base_url”}} and {{block type=rss/order_new}} in CMS pages or emails, and the directives are not on this list, you will need to add them with your database installation script. Extensions or custom code that handles content (like blog extensions) might be affected.

[Derco]

Hello.

Thank you for your answers.

I've tryed the permissions on the blocks, but they didn't worked.  Probably i'm not using the correct block names.

I've tryed this:

Magentothem/Featuredproductslider

And this is the path from here the extension is:

/app/code/local/Magentothem/Featuredproductslider

It's this the correct name i should use?

[kanand304]

I also managed to install the SUPEE-6788 patch but my JOOMLA slider is now not visible on homepage.

Please, help me fix this.

Thanks

[kanand304]

How can I revert the SUPEE-6788 patch so that whatever changes has been made by it can be reverted and my website is rolled back to where it was before applying the patch. 

[Gemma]

The block name you should use to give permissions to the block is actually the block type, so for a product list like:

{{block type="catalog/product_list" name="home.catalog.product.list" alias="products_homepage" category_id="9" template="catalog/product/featured-list.phtml"}}

The 'Block name' you should use is catalog/product_list . Then all blocks of that type should show up again. 

[MagebitAssets]

You can try to use this extension to get the list of all blocks used - http://supee6788.magebit.com/
You can also use this to fix the bad files - https://github.com/rhoerr/supee-6788-toolbox

[Enzo Sparacino]

Hi, this is solution:

go to system -> permissions -> blocks and add this:

featuredproductslider/featuredproductslider

as block name and set is allowed to YES.

Save block permission.