thank you @Theo
but who count lines 40-60? 🙂 read carefully original: https://build.prestashop.com/news/major-security-vulnerability-on-prestashop-websites/
don´t count lines, find exact code there with your eyes, you aren´t robot
And: that is rough correction, not a fix. Guys from Prestashop don´t care about PS 1.6 anymore, and patch for PS 1.7 doesn´t fit neither to PS 1.6 nor TB.
So this rough correction is temporary good until some great coder make patch for TB here.
I am not so good, so I use this rough correction. But not deleting these rows, just disable by commenting it.
Question is: who use mysql cache and not file chaching? Who use mysql caching is vulnerable more now.