Sunshop Security patch 4.25 and earlier
Turnkey released a new patch here:
This is something to be applied immediately, to all shops. I’ve done it several times and it’s pretty easy, with no side effects. Also, it’s a good time to add a .htaccess file to your /admin area for add security.