Static block shortcodes not working on Magento

So Magento has been released. Here is the quick review highlighting a few of the good things about security we would get with Magento
Enjoy it and hopefully you can make up your mind!
With the latest edition of Magento, you can get your online stores for :

  • Against several potential threats
  • Manage the backward compatibility of the patch for extensions and customizations
  • Stronger security system

Here they are:


Magento now includes a white list of allowed blocks or directives.
If a module or extension uses variables like and in CMS pages or emails, and the directives are not on this list, you will need to add them with your database installation script.
Extensions or custom code that handles content (like blog extensions) might be affected.
For more details, you can visit this post Technical Details

In this blog post, we will help you to know how to solve the problem “Static block shortcodes not working on Magento” as bellow:

Step 1: Go to back end, System >> Permissions >> Blocks


Step 2: Click to Add New Block to add new blocks for custom blocks using in your site.

If your site using the New Products extension you can do similar with block named: “newproducts/newproducts

If your site using the Best Seller Products extension you can do similar with block named: “bestseller/bestseller

 Of course, we upgrade this for our extension, so it will be added automatically.

For example, in the Featured Products, use this code:

$installer = $this;
/* @var $installer Mage_Core_Model_Resource_Setup */
$core_resource = Mage::getSingleton('core/resource');
$check_permission_block_table = $installer->getConnection()->isTableExists(
if ($check_permission_block_table) {
	$installer->run("INSERT INTO {$core_resource->getTableName('permission_block')} (`block_name`, `is_allowed`) VALUES ('isfeatured/isfeatured', '1');	");

Hope this post will helpful for you. If there is anything else I can assist you with, please don't hesitate to send me a message