PrestaShop 9.1.4 and 8.2.7 - ps_facetedsearch security update. What should the store owner do?

PrestaShop 9.1.4 and 8.2.7 - is it worth updating the store?

For online store owners, this means one thing: it's a good idea to check what version of PrestaShop and the ps_facetedsearch module you have in your store, and then plan a safe upgrade.

Not every update has to mean a major technical project. Sometimes a single module update is enough. But even then, it' s a good idea to do it consciously: with a backup, a test of your store's performance and a check of key sales functions.

What has changed in PrestaShop 9.1.4 and 8.2.7?

PrestaShop 9.1.4 and PrestaShop 8.2.7 versions have been released so that a freshly downloaded installation package already contains a revised version of the ps_facetedsearch 4.0.4 module. This is the module responsible for filtering products in categories, one of the most important functions in stores with a larger product catalog.

The difference mainly concerns the set of modules included in the installation package. PrestaShop 9.1.4 also saw dependency updates, including Symfony components to version 6.4.41 and Twig to version 3.27.1.

Why is the ps_facetedsearch update important?

The ps_facetedsearch module is responsible for filtering products by features, attributes, price, categories or availability. In many stores, this is one of the most frequently used elements of the shopping path.

PrestaShop reported that a security vulnerability was discovered in the ps_facetedsearch module. Under certain conditions, specially crafted requests could be processed by the module in an unsafe manner, and the problem did not require an account or prior authentication. PrestaShop recommends upgrading the module to version 4.0.4.

If your store uses ps_facetedsearch, it's best to check the module version and plan to upgrade as soon as possible.

Do I need to update my entire PrestaShop store?

It depends on your store version, configuration and how you manage your modules.

If you are running an existing store, the most important thing is to check the version of the ps_facetedsearch module. Simply updating the module to version 4.0.4 solves a specific security problem described by PrestaShop.

In practice, you can assume this scenario:

• if you have a store on PrestaShop 9.1.x - it is worth considering an upgrade to PrestaShop 9.1.4,
• if you have a store on PrestaShop 8.2.x - it is worth considering an upgrade to PrestaShop 8.2.7,
• if you don't want to update your whole store now - at least check the version of ps_facetedsearch module and update it to 4.0.4,
• if your store has a custom template, modifications or many external modules - the update is best done on a test copy first.

Safe process - what to check before upgrading?

PrestaShop upgrade should not be performed on a production version, without preparation. Even a small change can affect the performance of a template, filters, shopping cart, integration or order process.

Before updating, it is a good idea to check:

1. the version of PrestaShop

Check whether the store is running on branch 8.2.x, 9.1.x, or perhaps on an older version. The further upgrade path depends on this.

2. version of ps_facetedsearch module

In the admin panel, check if you are using the Faceted Search / Faceted Navigation module and what version is currently installed. The target version should be 4.0.4 or later.

3. backup your files and database

Make a full backup of your store's database and files. See our blog for a step-by-step guide on how to do this: https: //prestashow.pl/prestash....

4. test environment

The safest way is to perform the upgrade first on a copy of the store. This way you can check if categories, filters, product card, shopping cart, orders, payment and delivery work after the update.

5 Compatibility of the template and modules.

If the store has a customized template, ERP integrations, marketplace, custom modules or modifications in the code, the update should be preceded by a short compatibility audit.

What can go wrong after an ill-considered update?

The most common problems after PrestaShop updates are not due to Core itself, but to a combination of a particular version of the store, template, modules and custom modifications.

After an untested update, you may experience, among other things:

• errors in product filtering,
• problems with the appearance of the template,
• JavaScript errors in the template,
• cache problems,
• incorrect indexing of filters,
• conflicts with SEO modules,
• slower store performance.

How to upgrade PrestaShop safely?

The safest process is as follows:

Step 1: Audit the current version of the store

First check the PrestaShop version, PHP version, list of active modules, template version and any modifications to the code.

Step 2: Backup

We make a full copy of the files and database. The backup should be able to be quickly restored.

Step 3: Test copy

The upgrade is best performed on a development or staging environment. This way, the production store works normally and the changes can be tested quietly.

Step 4: Update the module or store

Depending on the situation, update either the ps_facetedsearch module itself or the entire store to version 9.1.4 or 8.2.7.

Step 5: Tests after the upgrade

After the upgrade, you should test:

• home page,
• category lists,
• product filtering,
• search engine,
• product cards,
• adding to cart,
• placing an order,
• payments,
• delivery,
• transaction emails,
• administration panel,
• error logs.

Step 6: Deploy to production

Only after testing can the update be moved to the production store. It is best to do this during hours of lower traffic.

Can the update improve SEO?

Indirectly - yes.

A security update alone is not a classic SEO measure, but a stable, secure and properly functioning store is important for visibility. Technical problems in filters, categories, indexing, speed or server errors can negatively affect organic traffic.

In the case of the Faceted Search module, it is worth checking on occasion:

• whether the filters are generating too many indexable URLs,
• whether the filter pages have correct canonicale,
• whether Google is not indexing unnecessary combinations of filters,
• whether categories with filters do not cause duplicate content,
• whether important product categories are easily accessible to users and robots,
• whether filtering works quickly on mobile devices.

A well-executed upgrade is a good opportunity to combine security, stability and technical SEO.

Is it worth upgrading to PrestaShop 9?

If your store is running on an older version of PrestaShop, upgrading to PrestaShop 9 can be a bigger project than simply installing a security patch. PrestaShop 9.1 is a new branch that uses Symfony 6.4 LTS and supports PHP 8.5, among other things.

For some stores, upgrading to PrestaShop 9 will be a good direction, but it should be preceded by an analysis:

• PHP version on the server,
• compatibility of modules,
• template compatibility,
• external integrations,
• individual modifications,
• the impact of the upgrade on the sales process.

If the store is heavily modified, sometimes a planned migration and taking care of selected elements is a better solution instead of a quick update performed without an audit.

When is a module update enough, and when is a larger update needed?

Updating the module itself may be enough if:

• your store is running stably,
• you are using a supported version of PrestaShop,
• the problem only affects ps_facetedsearch,
• the template and modules are compatible,
• you are not planning major technical changes at this time.

A major store upgrade may be a better choice if:

• your store is running on an older version of PrestaShop,
• you have PHP compatibility issues,
• modules are not updated,
• errors appear in the panel or on the front end,
• the store runs slowly,
• you are planning development, new integrations or overseas expansion,
• you want to prepare your store for future versions of PrestaShop.

How can PrestaShow help you?

At PrestaShow, we provide technical support for PrestaShop stores: from single fixes to module updates to major updates and store rebuilds.

We can help you:

• check the version of PrestaShop and the ps_facetedsearch module,
• assess whether your store needs an urgent update,
• perform file and database backup,
• prepare a test copy of your store,
• update the Faceted Search module,
• upgrade PrestaShop to a newer version,
• check compatibility of modules and template,
• test the shopping cart, orders, payment and delivery,
• fix bugs after the update,
• prepare the store for further development.

If you are not sure whether your store needs to be updated, write to us. We will check the situation and suggest a safe path of action.

FAQ: updating PrestaShop 9.1.4, 8.2.7 and ps_facetedsearch

Do I need to upgrade my entire store to PrestaShop 9.1.4 or 8.2.7?
Not always. If the problem is only with the ps_facetedsearch module, the priority is to check the version of this module and upgrade to version 4.0.4 or later. Upgrading the entire store should be preceded by a backup and testing.

How to check the version of ps_facetedsearch module?
In the PrestaShop admin panel, go to the list of modules and search for Faceted Search or ps_facetedsearch. There you will check the currently installed version of the module.

Can the upgrade be performed on a running store?
Technically you can, but it is not a safe approach. It is best to make a copy of the files and database, prepare a test environment, perform the update on a copy of the store and only after testing implement the change on production.

What to test after updating ps_facetedsearch?
After the update, it is a good idea to test categories, product filters, sorting, pagination, search engine, product card, shopping cart, orders, payment, delivery and error logs.

Can updating ps_facetedsearch affect SEO?
Yes, indirectly. The module is responsible for filtering products, and filters can generate multiple URLs. After the update, it's worth checking canonicale, indexing of pages with filters and possible duplicate content.

Can PrestaShow perform such an update?
Yes. PrestaShow can check the version of the store and modules, prepare a test copy, make a backup, perform the update, and check the operation of the store after implementation.