Paypal SHA-256...will it affect 4.1.2?

[boodog]

I don't know what SHA-256 is or what it does, but I offer subscriptions on my forum and need to know if this will affect it. I'm running VB 4.1.2.

Any help, comments, or suggestions will be appreciated.

[Paul M]

That particular paypal change wont affect 4.1.2, but other paypal changes will - the updates for that are in 4.2.4

[bchertov]

That particular paypal change wont affect 4.1.2, but other paypal changes will - the updates for that are in 4.2.4

Can you be more specific? I am running 4.1.12 PL4. I need to know what may break when, and have some idea what I can do to fix it besides upgrading my heavily customized system, such as grabbing some code out of 4.2.4 and integrating it into my system. Thanks!

[Mark.B]

Can you be more specific? I am running 4.1.12 PL4. I need to know what may break when, and have some idea what I can do to fix it besides upgrading my heavily customized system, such as grabbing some code out of 4.2.4 and integrating it into my system. Thanks!

We can't help with that. The solution is to upgrade. 4.1.2 is unsupported and contains unpatched security holes. You need to upgrade.

4.2.4 code won't be compatible with 4.1.2 anyway due to php compatibility issues.

[Paul M]

You could try dropping the whole class_paypal.php file from 424 into 412, and cross your fingers.

It might work (as long as you have cURL installed, otherwise it will definitely fail).

No promises though as 412 is just old (and insecure, you are open to several different attacks patched since 2011).