Security and backups for the stores still on PrestaShop 1.7
Many stores still run PrestaShop 1.7, often with modules that cannot make the move to 8. They are also the versions hit by the 2022 attack.
1.7 releases before 1.7.8.7 were exposed.
In July 2022 an SQL injection hit PrestaShop from 1.6.0.10 onward: the fix came with 1.7.8.7. Attackers created blm.php in the root and inserted a fake payment form into the checkout.
We compare the installed version with the OSV.dev and Friends of Presta advisories: a 1.7 shop older than 1.7.8.7 gets a critical alert. Core integrity and the file scan find files already changed.
Tested on the three 1.7 minors.
Real installs
PrestaShop 1.7.6 with PHP 7.1 and 7.2, 1.7.7 with PHP 7.3, 1.7.8 with PHP 7.4.
Checks
Core integrity, malware signatures in templates and PHP, new administrators, installed modules, backup and restore.
Upgrades
Real upgrades with Update Assistant from 1.7.6 to 1.7.7, to 1.7.8 and to 8.0: one notification each.
Want to try it on a real site? The 30-day trial needs no credit card.
Start free trialFrequently asked questions
Does the module run on PHP 7.1?
Yes, on 1.7.6 it was tested with PHP 7.1 and 7.2.
Do you support PrestaShop 1.6?
No, the module starts at 1.7.6.
Goes well with
- Detecting credit card skimmers in PrestaShop storesThe 2026 head.tpl loader and the 2022 blm.php dropper.
- PrestaShop core file integrity checksComparison with the official package, renamed admin folder included.
- Encrypted backups and restores for PrestaShop storesOrders, customers and files encrypted on the server, restores with the module still active.
- Monitoring the sites still on WordPress 5 and PHP 7.4Every version from 5.0 to 5.9 tested with PHP 7.4, core updates included.
Try it on your clients' sites.
Connect your first sites today and see what SitePing finds on them.
- Every Complete feature except backups
- Up to 10 sites
- No credit card needed to start
- At the end you choose a plan or move to Free, and nothing is charged
Already have an account? Log in. Prefer to look at one site first? Free read-only audit.