PrestaShop 1.7.7.2

This patch release fixes multiple regressions reported on versions 1.7.7.0 and 1.7.7.1 and 2 security issues.

Security issues fixed

• #GHSA-557h-hf3c-whcg: Improper session management for soft logout
• #GHSA-2rw4-2p99-cmx9: CSV Injection via csv export

Main fixes

Upgrade

• When upgrading from 1.6.1.24 to 1.7.7.1, modules crashes the FO
• When upgrading from 1.7.6.9 to 1.7.7.1 some DB's columns are missing

SEO

• ItemList is incorrect for products blocks of carousels and product list
• A search with Alias composed with two words doesn't show any results

Order page

• I cannot delete a product when debug mode is enabled
• The display of the cart rule on FO with free gift + percentage cart rule is incorrect
• The Shipping price not instantly updated on the Order page
• The VAT number is missing in order page
• I cannot search a product when a shop from different Group is selected on create a the Add new order page
• Symfony ContextErrorException Error 500 when debug enabled
• The refresh button is not working on details modal of carts on the customer page
• The gift block is not updated when changing the Address for a discount on the countrie on the Add new Order page
• An error is displayed in the console when adding a voucher

Shopping Cart

• Reference number of product is incorrect in Shopping Carts
• Searching and viewing shopping carts in the back office produces an "unexpected error" screen

Others

• Installation Error in Persian (Farsi) Language
• Customer Group Discounts are not showned on Your voucher page in the front-office

Full Changelog

Click here to see

• Back Office:
  • Bug fix:
    • #23289: Use default currency when supplier currency setting is incorrect (by @atomiix)
    • #23078: [BC Break] Fixed missing APE/SIRET Code in BackOffice Order View (by @Progi1984)
    • #22980: Replaced hooks displayAdminList<Before|After> with displayAdminGridTable<Before|After> (by @Progi1984)
    • #22997: Fix compare function of dashboard's calendar (by @NeOMakinG)
    • #22947: Fix Shopping Cart page in BO throwing an exception (by @atomiix)
    • #22909: BO - Create Order - Updated product list when adresses changed (by @Progi1984)
    • #22863: Fix reference in Shopping carts view (by @kpodemski)
    • #22805: BO - Orders page - Cannot delete a product restricted by a cart rule (by @Progi1984)
    • #22688: Prevent HookDataCollector unserialize() to throw an exception (by @atomiix)
    • #22685: Create Order - Cart details modal - Fix refresh for cart total (by @sowbiba)
    • #22673: PerfectScrollBar needs available element (by @PierreRambaud)
    • #22542: Handle case where product location is a boolean (by @atomiix)
    • #22367: Order view - Refresh shipping tab when product is added, removed or updated (by @sowbiba)
    • #22579: Prevent HookDataCollector unserialize() to throw an exception (by @atomiix)
    • #22161: Fix group reduction when specific price is set (by @sowbiba)
    • #22249: Create Order - Cart details modal - Fix refresh for cart total (by @sowbiba)
• Front Office:
  • Improvement:
    • #22528: Better handle aliases with space in search (by @atomiix)
  • Bug fix:
    • #23024: Fixed BreadcrumbList Rich Result on FrontOffice (by @Progi1984)
    • #22518: Define when a voucher should be displayed in 'Your vouchers' (by @atomiix)
• Core:
  • Improvement:
    • #23224: Update PrestaShop's composer dependencies (by @atomiix)
    • #23220: Update composer versions of native modules for 1.7.7.2 (by @matks)
  • Bug fix:
    • #GHSA-557h-hf3c-whcg: Improper session management for soft logout (by @PierreRambaud)
    • #GHSA-2rw4-2p99-cmx9: CSV Injection via csv export (by @PierreRambaud)
    • #23276: Update composer version of ps_categorytree (by @atomiix)
    • #22682: Fix warning/errors from upgrade scripts (by @atomiix)
    • #23139: Update pear/archive_tar to 1.4.12 (by @matks)
    • #22768: Exclude gifts from getOrderTotal when selected ONLY_PRODUCTS (by @PierreRambaud)
    • #22841: Bring back vat number to address on order view (by @kpodemski)
• Installer:
  • Bug fix:
    • #22735: Fix installation carrier delay Error for Persian Language (by @matks)
• Tests:
  • Refactoring:
    • #22875: Rename default account var name (by @boubkerbribri)
    • #23129: Add test - Enable/Disable demo mode (by @nesrineabdmouleh)
    • #23004: Add test 'Languages pagination' (by @nesrineabdmouleh)
    • #23023: Add test 'Carrier options - order by ascending/descending ' (by @nesrineabdmouleh)
    • #22953: Add test 'Filter, sort and paginaion shops' (by @nesrineabdmouleh)
    • #22985: Add test 'Set required fields for address page' (by @nesrineabdmouleh)
    • #22954: Add test 'Sort shop groups' (by @nesrineabdmouleh)
    • #22925: Add test 'Add and delete shop URL' (by @nesrineabdmouleh)
    • #22927: Fix nightly 21-01-2021 on 1.7.7.x (by @boubkerbribri)
    • #22912: Fix nightly tests failing on 20-01-2021 (by @boubkerbribri)
    • #22900: Add test 'Test handling charges for carriers in FO' (by @nesrineabdmouleh)
    • #22856: Add test 'Check customer block' in order page (by @nesrineabdmouleh)
    • #22855: Add test 'View vouchers on FO account Page' (by @boubkerbribri)
    • #22874: Add test 'Check number of orders in order history page' (by @boubkerbribri)
    • #22762: Add test 'Filter sort pagination shop groups' (by @nesrineabdmouleh)
    • #22879: Add test 'CRUD shop group' (by @nesrineabdmouleh)
    • #22876: Add test 'Filter,sort and pagination logs' (by @nesrineabdmouleh)
    • #22792: Backport UI tests for 1.7.7.2 (by @boubkerbribri)
    • #22556: Fix nightly 1.7.7.x - 23/12/2020 (by @nesrineabdmouleh)
    • #22678: Fix nightly 1.7.7.x - 05/01/2021 (by @nesrineabdmouleh)
    • #22656: Delete UI upgrade test (by @boubkerbribri)