Land rapid7#6975, Fixed typos in the Magento documentation

Author: tdoan-r7

documentation/modules/exploit/multi/http/magento_unserialize.md

@@ -42,15 +42,15 @@ Ubuntu 14, and assumes you are installing Magento under /var/www/html/.
 15. Enter: ```sudo apt-get install php5-xsl php5-curl php5-intl```
 16. Enter: ```sudo service apache2 restart```
 17. cd to /var/www/html, enter: ```sudo mkdir tmp```, and cd to tmp
-18. In tmp, do: ```curl -sS https://getcomposer.org/install | php```
+18. In tmp, do: ```curl -sS https://getcomposer.org/installer | php```
 19. Enter: ```sudo mv composer /usr/local/bin/composer```
 20. In /var/www/html, do: ```composer install```
 21. You will be asked for a username (public key) and password (private key). You can register
     for one here: https://marketplace.magento.com/
 22. Back to terminal, enter: ```mysql -h localhost -u root -p[password]```
 23. In mysql, enter: ```create database magento```, and exit
 24. Go to http://localhost with a browser, and install Magento through the web interface.
-25. After installation, back to the terminal, and enter: ```sudo rm -rf var/cache/*```
+25. After installation, back to Magento directory, and enter: ```sudo rm -rf var/cache/*```
 26. Enter: ```sudo rm -rf var/generation/*```
 27. Enter: ```sudo rm -rf var/page_cache/*```
 28. cd to /var/www/html/bin
@@ -60,7 +60,22 @@ Ubuntu 14, and assumes you are installing Magento under /var/www/html/.
 32. Enter: ```sudo chmod -R 777 /var/www/html```
 33. Go to http://localhost, you should see Magento up and running.
 34. From Magento, log in as admin, and create a product. After creating one, make sure this product
-    is also searchable from the front-end.
+    is:
+    * Either includes a shipping address, or does not have a weight.
+    * Searchable from the front-end.
+
+If at some point the IP (base URL) of Magento has changed, then you will need to do these steps to update:
+
+1. From the terminal, do: ```mysql -h localhost -u [username] -p[password]```
+2. In the SQL prompt, do: ```use [magento database name]```
+3. Do: ```select * from core_config_data;```, you should see both web/unsecure/base_url (config ID 2) and web/secure/base_url (config ID 3) with the hardcoded IP.
+4. Do: ```update core_config_data set value='http://[IP]/' where config_id=2;```
+5. Do: ```update core_config_data set value='https://[IP]/' where config_id=3;```
+6. Back to the Magento directory, do: ```sudo rm -rf var/cache/*```
+7. Also do: ```sudo rm -rf var/generation/*```
+8. Also do: ```sudo rm -rf var/page_cache/*```
+9. Browse to Magento again with the new IP, it should be up and running again.
+
 
 After setting up Magento, you can use your exploit module: