Magento XML-RPC bug fix

On some Magento installations, the validation of the XML RPC method parameters does not work, even if the call is correct.

This can be fixed by modifying a core file.

Open: lib/Zend/XmlRpc/Server.php

Find the following (around line 567):

if (!$matched)
{
            #require_once 'Zend/XmlRpc/Server/Exception.php';
            throw new Zend_XmlRpc_Server_Exception('Calling parameters do not match signature', 623);
}

And comment it out:

/*
if (!$matched)
{
            #require_once 'Zend/XmlRpc/Server/Exception.php';
            throw new Zend_XmlRpc_Server_Exception('Calling parameters do not match signature', 623);
}
*/

Then please contact our support again to make sure the problem is solved.

Have more questions? Submit a request

2 Comments

  • -1
    Avatar
    David Bell

    Surely commenting out that block just disables the validation by preventing it from ever failing. That would mean that an API connection could be made without requiring the correct API key

  • 1
    Avatar
    Bnaya

    Hey David,

    Thanks for the concerns but from the tests we ran this is not true. The API key validation is on a different code and you are welcome to test it.
    Also, this is an old bug and probably got fixed, upgrading Magento might solve this issue without commenting out any code.

    Bnaya

Please sign in to leave a comment.