How to Install Magento SUPEE 6788 with or without SSH

Securing the stores against any potential attacks or threats is a must factor for any E-commerce store. To serve this purpose, Magento releases Security Patches frequently. With the Security Patches correctly installed in Magento stores, the store owners increase the security and hence provide safe transaction experience to their customers!

Magento released Security Patch SUPEE 6788 on Oct 27, 2015, to ensure protection against threats such as remote code execution, information leaks, and cross-site scripting.

With nearing of Magento 1 end of life, it is strongly recommended to migrate to the latest Magento 2.3.2 rather than installing Magento SUPEE-6788.

Installing Magento SUPEE 6788

One of the below methods is to be followed to install Magento SUPEE 6788.

Method 1: Install Magento SUPEE 6788 using SSH

Contact your hosting provider if you don’t know how to set up SSH. Download Magento SUPEE 6788 Patches files for your Magento Version from here.

Upload the patch into your Magento root directory and run the appropriate SSH command:

For .sh file extension:


For .patch file extension:

Note: Once executed the command, refresh the cache in the Admin under “System > Cache Management” so that the changes can be reflected. We strongly recommend that you test all patches in a test environment before taking them live.


Method 2: Install Magento SUPEE 6788 with PrePatched Files

Download the zip file for your Magento Version for the patch installation. You can also download these Pre Patched files from GitHub. After downloading the files, just upload it to your Magento root folder.

Magento VersionSUPEE 6788

How to check if Magento SUPEE 6788 has been installed correctly?

Use to check the accuracy of the installation process.


Magento SUPEE 6788 Installation Possible Issues:

After Magento SUPEE 6788 installation, if you don’t get bash output like “Patch was applied/reverted successfully”, check the output for any issues. If the issue still persists, it is recommended to update the .htaccess file. First of all, take a backup and replace the default one. If it doesn’t help, we provide advanced solution to follow but implemet it on your own responsibility.

Simply remove the lines 163-195 from the patch file which should start with:

and end with:

Additionally, if it helps apply the patch, simply add below lines at the end of your .htaccess file:

Now check if any file has been infected with patch file override. Most of the updated files reside in core structure and they shouldn’t be affected but still it’s wise decision to check files below to check after patch installation:

  • Any class overriding Mage_Customer_AccountController (magento_root/app/code/core/Mage/Customer/controllers/AccountController.php).
  • Custom design theme may override customer registration form where you should simply add a form key right after the “form” tag:
  • Affected templates are as follows:
    • magento_root/app/design/frontend/base/default/template/customer/form/register.phtml
    • magento_root/app/design/frontend/base/default/template/persistent/customer/form/register.phtml
    • magento_root/app/design/frontend/rwd/enterprise/template/customer/form/register.phtml
  • For Enterprise Edition:
    • magento_root/app/design/frontend/enterprise/default/template/customer/form/register.phtml
    • magento_root/app/design/frontend/enterprise/default/template/persistent/customer/form/register.phtml
    • magento_root/app/design/frontend/rwd/enterprise/template/customer/form/register.phtml
    • magento_root/app/design/frontend/rwd/enterprise/template/persistent/customer/form/register.phtml


  • Forgot password reset form may have overridden, here, replace the “form” opening tag with the below one:
  • Affected templates are as follows:
    • magento_root/app/design/frontend/base/default/template/customer/form/resetforgottenpassword.phtml
    • magento_root/app/design/frontend/rwd/default/template/customer/form/resetforgottenpassword.phtml
  • For Enterprise Edition:
    • magento_root/app/design/frontend/enterprise/default/template/customer/form/resetforgottenpassword.phtml
    • “customer_account_changeforgotten” may have replaced Customer layout “customer_account_resetpassword”. So, if you have magento_root/app/design/frontend/custom_package/custome_theme/layout/customer.xml or custom theme with the same file in “default”, “rwd” or “enterprise” packages, replace:



Feel free to ask any doubts in the Comments Section. I’d be happy helping you to solve your queries.

Store owners who don’t want to get into the task of installation may check Magento Security Patches Installation Service!
Also, Magento Upgrade is advisable over patch installation in order to get the latest features and higher security for your Magento stores! To get your Magento store upgraded to the latest version, check our Magento Upgrade Service.

Don’t forget to write down your suggestions, ask questions through commenting. Also hit the 5 stars below to appreciate our work.

Magento Security Patches Installation Service

Keep the security of your Magento store updated to the highest level using our Magento Security Patches Installation Service.

(based on 2 Reviews)
How to Install Magento SUPEE 6788 with or without SSHAuthor Magento Badge

Sanjay Jethva

Sanjay is a co-founder at Meetanshi. He is a Certified Magento Developer who loves creating Magento E-commerce solutions. Owing to his contributions in Magento Forums and posting solutions, he is among the top 50 contributors of the Magento community in 2019. When he is not engrossed with anything related to Magento, he loves to play cricket.

Leave a Reply

Your email address will not be published. Required fields are marked *